Skills one-drive-automation
📦

one-drive-automation

Content revision r2 High Risk ⚙️ External commands🌐 Network access

Automate OneDrive Workflows with Rube MCP

Manual OneDrive tasks consume time and can introduce permission errors. This skill guides Claude, Codex, and Claude Code through structured Rube MCP workflows.

Supports: Claude Codex Code(CC)
⚠️ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "one-drive-automation" from https://skillstore.io/skills/sickn33-one-drive-automation.md and its manifest at https://skillstore.io/api/skills/sickn33-one-drive-automation/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "one-drive-automation". Find quarterly budget files modified recently.

Expected outcome:

  • Found 6 matching files across Finance and Shared Reports.
  • The newest match is Q3 Budget.xlsx, modified on 2026-07-29.
  • No files were changed.

Using "one-drive-automation". Prepare to share Project Plan.docx with two reviewers.

Expected outcome:

  • The file was verified in /Projects/Launch.
  • Both recipients would receive read access and a notification.
  • The sharing action is waiting for confirmation.

Using "one-drive-automation". Move archived reports into the 2025 archive folder.

Expected outcome:

  • Identified 14 candidate reports and verified the destination folder.
  • Two naming conflicts require decisions before execution.
  • No items were moved.

Security Audit

High Risk
v6 • 8/4/2026 Open versioned report

All 123 shell-execution alerts are false positives caused by Markdown backticks, and both reconnaissance alerts misread parameter documentation. The external MCP endpoint is a real low-severity network dependency. OAuth delegation and consequential OneDrive mutations require disclosure, least privilege, and consistent confirmation.

1
Files scanned
247
Lines analyzed
1
Review items
0
False positives ignored

Confirmed security concerns (2)

High
Consequential Mutations Need Consistent Confirmation
The workflow can grant permissions, create links, move files, and delete items. Only higher-role grants explicitly require confirmation, leaving other mutations without equivalent safeguards.
The cited workflows directly support sharing, permission grants, moves, copies, and deletion, while the explicit confirmation rule only covers higher access roles.
Medium
Third-Party OAuth and Data Access
The setup delegates OneDrive access through Rube MCP and a Microsoft OAuth flow. Users need clear disclosure of scopes, data handling, and revocation steps.
The setup explicitly configures an external MCP endpoint and instructs users to complete Microsoft OAuth for OneDrive access.
Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low
Hardcoded URL
**Get Rube MCP**: Add `https://rube.app/mcp` as an MCP server in your client configuration. No API k
The skill explicitly directs users to connect to the external Rube MCP endpoint. This intended network dependency can receive authenticated OneDrive operations.
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/sickn33-one-drive-automation/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-one-drive-automation/security.svg)](https://skillstore.io/skills/sickn33-one-drive-automation?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-one-drive-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-one-drive-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-one-drive-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). one-drive-automation security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-one-drive-automation/audits/6

BibTeX citation

@techreport{sickn33-sickn33-one-drive-automation-2026, author = {sickn33}, title = {one-drive-automation security audit report (audit version 6)}, institution = {Skillstore}, year = {2026}, number = {6}, url = {https://skillstore.io/skills/sickn33-one-drive-automation/audits/6}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "one-drive-automation security audit report (audit version 6)" version: "unspecified" type: report authors: - name: "sickn33" date-released: "2026-08-04" url: "https://skillstore.io/skills/sickn33-one-drive-automation/audits/6" identifiers: - type: other value: "skillstore:sickn33-one-drive-automation:audit:6" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance

What You Can Build

Find Team Documents

Search shared drives, inspect matching metadata, and return direct links with clear folder context.

Organize Project Files

Create folders, upload deliverables, and move or copy items after confirming each destination.

Review Sharing Access

Inspect current permissions, identify intended recipients, and prepare controlled sharing changes.

Try These Prompts

Find a File
Search my OneDrive for files matching [keywords]. Show names, folders, modification dates, and links. Do not change any files.
Upload a Document
Find the OneDrive folder [folder path]. Upload [file] there, confirm the destination first, and report the final filename and link.
Audit and Share
Inspect permissions for [item]. Summarize current access, propose [read or write] access for [recipients], and wait for confirmation before sharing.
Reorganize a Drive
Inventory [source folder], plan moves and copies into [destination structure], flag conflicts, and estimate impact. Wait for approval before every mutation.

Best Practices

  • Search current tool schemas before selecting parameters or planning calls.
  • Verify item identifiers, recipients, roles, and destination folders before changing OneDrive data.
  • Use pagination, bounded batches, and Retry-After guidance for large drives.

Avoid

  • Do not use web links or manually constructed values as OneDrive item identifiers.
  • Do not grant access, create public links, or delete items without explicit user confirmation.
  • Do not send aggressive parallel requests or ignore pagination and throttling responses.

Frequently Asked Questions

What connection does this skill require?
It requires Rube MCP and an active Microsoft OneDrive connection created through the returned OAuth flow.
Can it search file contents?
The documented search tool can match filenames, metadata, and indexed content using plain keywords.
Does OneDrive search support KQL or wildcards?
No. Use plain keywords, and use folder listing when path-based filtering is required.
Can it modify sharing permissions?
Yes. It can inspect permissions, invite recipients, and create links after verifying the item and receiving confirmation.
Are deleted files permanently removed?
The documented delete operation moves items to the OneDrive recycle bin.
How does it handle large folders and rate limits?
It follows pagination tokens, uses bounded batches, and honors Retry-After responses instead of sending aggressive parallel requests.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

81e05e636292629114b76cbb3922fbe57672fc02

Maintenance freshness

8/5/2026

Usage

14 downloads · 156 views

File structure

📄 SKILL.md

More from sickn33

View all
View all