m365-agents-ts
Warn
Audited by Socket on Mar 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The code fragment is coherent with its stated purpose as a Microsoft 365 Agents SDK sample. It uses official package namespaces, relies on environment variables for sensitive credentials (as expected), and demonstrates standard server and streaming patterns without obvious malicious behavior or data exfiltration. The primary risk is typical secret management exposure in environment configurations; no suspicious external downloads or credential harvesting patterns are evident. Overall assessment: BENIGN with MEDIUM security risk due to environmental secrets handling; no malware detected.
Confidence: 75%Severity: 75%
Audit Metadata