office365-connector

Fail

Audited by Socket on Feb 12, 2026

5 alerts found:

filesystemAccessusesEvalObfuscated FilenetworkAccessenvVars
filesystemAccessLOW
usesEvalMEDIUM
Obfuscated FileHIGH
calendar.js

The code is a straightforward, legitimate calendar viewer for Microsoft Graph with clear data flow and output semantics. Notable improvements include strengthening time zone handling, validating inputs, and considering privacy-safe logging. Overall, it shows standard usage with moderate security exposure primarily tied to token scopes and calendar data access.

Confidence: 98%
networkAccessMEDIUM
envVarsLOW
Audit Metadata
Analyzed At
Feb 12, 2026, 09:11 PM
Package URL
pkg:socket/skills-sh/openclaw%2Fskills%2Foffice365-connector%2F@ef7319087756c610566deeb25fde1f02d57f436b