Skills outlook-automation
๐Ÿ“ฆ

outlook-automation

Content revision r2 High Risk โš™๏ธ External commands๐ŸŒ Network access

Automate Outlook Workflows with Rube MCP

Managing Outlook data across email, calendars, contacts, and folders requires many precise tool calls. This skill provides guided sequences and parameter advice through Rube MCP.

Supports: Claude Codex Code(CC)
โš ๏ธ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "outlook-automation" from https://skillstore.io/skills/sickn33-outlook-automation.md and its manifest at https://skillstore.io/api/skills/sickn33-outlook-automation/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "outlook-automation". Find unread high-importance messages in my inbox.

Expected outcome:

  • Found 8 matching messages across one completed pagination sequence.
  • The result lists each sender, subject, received time, and attachment status.
  • No messages or folders were changed.

Using "outlook-automation". Show my events tomorrow from 09:00 to 17:00 in Europe/London.

Expected outcome:

The calendar review lists four expanded events, highlights one overlap, and reports the remaining free periods in Europe/London.

Using "outlook-automation". Create a contact folder named Suppliers.

Expected outcome:

The proposed change is ready: create Suppliers under the selected contact folder. Execution is paused until explicit confirmation.

Security Audit

High Risk
v5 โ€ข 8/4/2026 Open versioned report

The static analyzer misclassified Markdown code spans and Outlook identifiers as shell execution or system reconnaissance. The skill has genuine network, OAuth data-access, attachment, and account-mutation risks because it delegates Outlook operations to an external MCP service.

1
Files scanned
200
Lines analyzed
1
Review items
0
False positives ignored

Confirmed security concerns (3)

High
Third-Party OAuth Access to Sensitive Outlook Data
The workflow connects Microsoft Outlook to Composio through Rube MCP. This external service can process mailbox, calendar, contact, and attachment data under granted OAuth scopes.
The skill explicitly names Composio, supplies the Rube MCP endpoint, and directs users to complete Microsoft OAuth. The documented workflows confirm access to sensitive Outlook data.
Medium
State-Changing Operations Lack Confirmation Safeguards
The skill supports creating contacts, contact folders, and mail folders but does not require a final user preview or confirmation before mutation.
The listed create tools are explicit state-changing operations. The surrounding workflow contains parameters and pitfalls but no confirmation requirement.
Medium
Attachment Downloads Lack Untrusted-File Safeguards
The email workflow can download attachments without requiring file review, malware scanning, or confirmation before download or opening.
The workflow explicitly lists attachment discovery and download tools. Its pitfalls discuss inline images but provide no security handling for untrusted files.
Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low
Hardcoded URL
**Get Rube MCP**: Add `https://rube.app/mcp` as an MCP server in your client configuration. No API k
The skill explicitly instructs users to configure the external https://rube.app/mcp endpoint. This creates a real network dependency handling OAuth-authorized Outlook operations.
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/sickn33-outlook-automation/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-outlook-automation/security.svg)](https://skillstore.io/skills/sickn33-outlook-automation?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-outlook-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-outlook-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-outlook-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

sickn33. (2026). outlook-automation security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-outlook-automation/audits/5

BibTeX citation

@techreport{sickn33-sickn33-outlook-automation-2026, author = {sickn33}, title = {outlook-automation security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/sickn33-outlook-automation/audits/5}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "outlook-automation security audit report (audit version 5)" version: "unspecified" type: report authors: - name: "sickn33" date-released: "2026-08-04" url: "https://skillstore.io/skills/sickn33-outlook-automation/audits/5" identifiers: - type: other value: "skillstore:sickn33-outlook-automation:audit:5" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
70
Community
83
Spec Compliance

What You Can Build

Triage Priority Messages

Find unread high-priority messages, summarize matching metadata, and identify messages that need follow-up.

Review Calendar Availability

Inspect events within a defined time window and report free or busy information in the requested timezone.

Organize Contacts and Folders

Review existing Outlook structures, then create approved contacts or folders with explicit confirmation.

Try These Prompts

Find Recent Emails
Search my Microsoft 365 mailbox for messages from [sender] received after [date]. Return subjects, senders, timestamps, and message identifiers.
Filter One Folder
List unread high-importance emails in [folder]. Use current tool schemas, paginate fully, and return only sender, subject, received time, and attachment status.
Review Calendar and Availability
Review calendar events from [start] to [end] in [timezone]. Expand recurring events and summarize conflicts before checking free or busy status.
Plan a Confirmed Organization Workflow
Inspect my existing mail and contact folders. Propose changes for [goal], show every planned mutation, and wait for explicit confirmation before creating anything.

Best Practices

  • Call the tool-search function first and follow the returned current schema.
  • Use the narrowest query, folder, date range, fields, and result count needed.
  • Preview results and require confirmation before downloads or account changes.

Avoid

  • Do not assume documented parameters remain current without searching tool schemas.
  • Do not mix email properties with calendar event properties.
  • Do not download attachments or create account objects from ambiguous requests.

Frequently Asked Questions

Which Outlook accounts support cross-folder message search?
The documented search workflow requires a Microsoft 365 or Enterprise account. Personal Outlook and Hotmail accounts have limited API support.
Does this skill require an Outlook connection?
Yes. Rube MCP must be available, and the Outlook connection must show ACTIVE after Microsoft OAuth.
Can it search every mail folder?
The message search tool supports cross-folder KQL search. The structured email query tool searches only one folder at a time.
Can it manage calendar events?
It can list calendars, inspect events, retrieve a calendar view, and check schedules. The documented workflow does not include event creation.
Can it create contacts and folders?
Yes. It documents contact, contact-folder, and mail-folder creation tools. Users should confirm every proposed change before execution.
How should attachments be handled?
Review the filename and type, confirm the download, and scan the file before opening it. Inline images may appear as attachments.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

81e05e636292629114b76cbb3922fbe57672fc02

Maintenance freshness

8/5/2026

Usage

15 downloads ยท 184 views

File structure

๐Ÿ“„ SKILL.md

More from sickn33

View all
View all