# Connect Microsoft Graph Email and Calendar

Microsoft 365 email and calendar work often requires switching tools and copying data manually. This skill lets an AI assistant use Microsoft Graph scripts for authenticated Outlook mail and calendar tasks.

## Install

```bash
npx skillstore add bltgv/microsoft-graph-api
```

## Metadata

- Status: approved
- Slug: bltgv-microsoft-graph-api
- Version: 0.3.0
- Author version: 0.3.0
- Skillstore revision: r1
- Version status: valid
- Tree hash: e8d8aa2365bdad9471acdf2cd9870b79bc488295d0ca4e5aa9f8cc741a7d82e0
- Author: BLTGV
- GitHub username: BLTGV
- License: MIT
- Repository: https://github.com/BLTGV/agent-skills/tree/master/skills/microsoft-graph
- Ref: 1b5b6c4962b2ad5a7a34603cab2685bbbd1b61ef
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: confirmation\_required
- Manual install advisory: allowed
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: network, external\_commands, filesystem, env\_access
- Quality score: 38
- Quality tier: warning
- Public page: https://skillstore.pages.dev/skills/bltgv-microsoft-graph-api
- Manifest: https://skillstore.pages.dev/api/skills/bltgv-microsoft-graph-api/manifest

## Capabilities

- Lists, reads, and searches Outlook email through Microsoft Graph.
- Sends email with to, cc, bcc, subject, body, and optional HTML content.
- Lists, views, and searches Outlook calendar events by date range or query.
- Creates calendar events with location, body, attendees, and all-day settings.
- Supports device-code authentication, token refresh, and named credential profiles.
- Returns structured status output for success, errors, and authentication states.

## Use Cases

- Review Daily Communications: Check unread mail, search important messages, and inspect upcoming meetings from one assistant workflow.
- Coordinate Team Meetings: Find calendar availability context, create meeting events, and send follow-up emails through Microsoft 365.
- Support Office Automation: Use repeatable scripts to list folders, search mailbox records, and create calendar items for routine requests.

## Prompt Templates

### List Today's Schedule

```
Show my Outlook calendar events for today using the Microsoft Graph skill. Include start time, title, organizer, and location.
```

### Search Recent Mail

```
Search my Outlook email for messages about quarterly planning from the last month. Summarize sender, subject, date, and preview.
```

### Draft And Send Email

```
Prepare an email to the project team with this update. Show me the recipients, subject, and body for approval before sending.
```

### Create A Meeting Workflow

```
Find my meetings next week, identify a free one-hour slot, then create a review meeting with the listed attendees after I confirm the details.
```

## Limitations

- Requires Bun, network access, and a Microsoft account with approved Graph permissions.
- Stores OAuth credentials in a local JSON file under the user home directory.
- Does not implement attachment download, pagination beyond top limits, or automatic rate-limit retry.
- Side-effect actions such as sending mail and creating events require careful user confirmation.

## Best Practices

- Use named profiles to separate work, personal, and tenant-specific Microsoft accounts.
- Ask for explicit confirmation before sending email or creating calendar events.
- Use the smallest Graph permission scope needed for the current task.

## Anti Patterns

- Do not send email or create events from inferred intent alone.
- Do not paste sensitive message bodies into shared prompts or logs.
- Do not reuse a broad default OAuth app when tenant policy requires a dedicated app registration.

## Security Audit

- Audited at: 2026-07-19T02:22:34.877\+00:00
- Summary: Most static alerts are false positives caused by TypeScript template literals, Markdown backticks, example identifiers, and official Microsoft URLs. Confirmed risks include OAuth network operations, immediate email sending, and plaintext credential storage. Semantic review also found weak secret-file permissions, indirect prompt-injection exposure, and unconfirmed calendar creation.

## Stats

- Views: 246
- Downloads: 22
- Favorites: 0
- Popularity score: 0