Skills m365-agents-dotnet

📦

m365-agents-dotnet

Name: m365-agents-dotnet
Author: sickn33

Content revision r1 Medium Risk ⚙️ External commands🌐 Network access📁 Filesystem access

Build Microsoft 365 Agents in .NET

Building Microsoft 365 agents in .NET requires coordinated hosting, routing, authentication, and Copilot Studio setup. This skill gives focused patterns and prompts for building those pieces faster.

Supports: Claude Codex Code(CC)

📊 70 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "m365-agents-dotnet" from https://skillstore.io/skills/sickn33-m365-agents-dotnet.md and its manifest at https://skillstore.io/api/skills/sickn33-m365-agents-dotnet/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/sickn33-m365-agents-dotnet.md Signed manifest GET /api/skills/sickn33-m365-agents-dotnet/manifest Signed lockfile GET /api/skills/sickn33-m365-agents-dotnet/lockfile

Test it

Using "m365-agents-dotnet". Plan a new Microsoft 365 agent host in ASP.NET Core.

Expected outcome:

A concise implementation plan with package choices, host startup steps, endpoint routing, storage notes, and authentication checkpoints.

Using "m365-agents-dotnet". Review my Teams agent authentication design.

Expected outcome:

A security review covering token validation, tenant configuration, endpoint authorization, secret storage, and production readiness gaps.

Using "m365-agents-dotnet". Help connect a .NET app to Copilot Studio.

Expected outcome:

A client design summary covering MSAL token flow, connection settings, HttpClientFactory usage, and validation questions.

Security Audit

Medium Risk

v4 • 7/7/2026 Open versioned report

Most static findings are false positives from Markdown code fences, package installation examples, OAuth configuration, localhost development URLs, and documentation links. No prompt injection or malicious exfiltration intent was found in SKILL.md. One semantic issue remains: the sample error handler sends raw exception messages back to the conversation.

Files scanned

291

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

SKILL.md:159-170

Raw Exception Message Exposed to User

The OnTurnErrorAsync sample assigns exception.Message to an outgoing end-of-conversation activity. Production agents should avoid exposing internal error details to chat users.

The code directly copies Exception.Message into an outbound activity after an error. This is a secure coding issue in sample code, not evidence of malicious intent.

Risk Factors

⚙️ External commands (11)

SKILL.md:19-25 SKILL.md:25-29 SKILL.md:29-71 SKILL.md:71-75 SKILL.md:75-117 SKILL.md:117-121 SKILL.md:121-173 SKILL.md:173-179 SKILL.md:179-225 SKILL.md:225-229 SKILL.md:229-264

🌐 Network access (10)

SKILL.md:49 SKILL.md:51 SKILL.md:113 SKILL.md:205 SKILL.md:285 SKILL.md:286 SKILL.md:287 SKILL.md:288 SKILL.md:289 SKILL.md:290

📁 Filesystem access (1)

SKILL.md:51

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/sickn33-m365-agents-dotnet/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-m365-agents-dotnet/security.svg)](https://skillstore.io/skills/sickn33-m365-agents-dotnet?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-m365-agents-dotnet?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-m365-agents-dotnet/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-m365-agents-dotnet.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). m365-agents-dotnet security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-m365-agents-dotnet/audits/4

BibTeX citation

@techreport{sickn33-sickn33-m365-agents-dotnet-2026,
  author = {sickn33},
  title = {m365-agents-dotnet security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/sickn33-m365-agents-dotnet/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "m365-agents-dotnet security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "sickn33"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/sickn33-m365-agents-dotnet/audits/4"
identifiers:
  - type: other
    value: "skillstore:sickn33-m365-agents-dotnet:audit:4"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Start a Microsoft 365 agent

Create a first ASP.NET Core host with package guidance, message routing, and authentication checkpoints.

Harden agent authentication

Review token validation, authorization, tenant settings, and secret handling before moving an agent toward production.

Plan Copilot Studio integration

Design a direct-to-engine client flow with MSAL, HttpClientFactory, and Copilot Studio connection settings.

Try These Prompts

Start a Basic Agent Host

Use the m365-agents-dotnet skill to outline an ASP.NET Core host for a Microsoft 365 agent. Include packages, routes, auth, and storage choices.

Design Agent Routing

Use the skill to plan AgentApplication handlers for welcome events, message replies, and errors. Explain where each handler belongs.

Configure Production Authentication

Use the skill to review my Microsoft 365 agent authentication plan. Check token validation, tenant settings, authorization, and secret handling.

Integrate Copilot Studio Client

Use the skill to design a Copilot Studio direct-to-engine client. Include MSAL flow, HttpClientFactory usage, and production hardening questions.

Best Practices

Verify current Microsoft.Agents APIs and NuGet versions before implementation.
Use durable storage and secure secret providers for production agents.
Require authorization on message endpoints and validate tokens in production.

Avoid

Do not use MemoryStorage for production conversation state.
Do not return raw exception details to users.
Do not hardcode tenant secrets or client secrets in source files.

Frequently Asked Questions

What does this skill help build?

It helps build Microsoft 365 agents with .NET, ASP.NET Core hosting, AgentApplication routing, and Microsoft authentication patterns.

Does it create a complete production app?

No. It provides implementation patterns and prompts, but production deployment still needs tenant setup, app registration, storage, and operations work.

Can I use it with Claude, Codex, and Claude Code?

Yes. The report marks the skill as compatible with Claude, Codex, and Claude Code.

Does it cover Copilot Studio?

Yes. It includes a direct-to-engine client pattern with MSAL token acquisition and HttpClientFactory usage.

Does it manage Microsoft credentials?

No. It uses placeholders and expects secure credential management through approved configuration providers.

Should I verify Microsoft documentation?

Yes. The skill explicitly recommends checking current Microsoft documentation and NuGet versions before implementation.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/m365-agents-dotnet

Ref

816c62b2546ddb1c6a0453e7c781b5e095117819

Maintenance freshness

7/18/2026

Usage

7 downloads · 115 views

File structure

📄 SKILL.md