Skills find-outlook-emails

📦

find-outlook-emails

Name: find-outlook-emails
Author: Whitefield-Labs

Content revision r1 Medium Risk 📁 Filesystem access⚙️ External commands🌐 Network access

Find Outlook Emails with Rarefriend Context

Important email history is hard to find when it is separated from contact notes. This skill searches Outlook and connects messages with Rarefriend relationship context.

Supports: Claude Codex Code(CC)

⚠️ 50 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "find-outlook-emails" from https://skillstore.io/skills/whitefield-labs-find-outlook-emails.md and its manifest at https://skillstore.io/api/skills/whitefield-labs-find-outlook-emails/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/whitefield-labs-find-outlook-emails.md Signed manifest GET /api/skills/whitefield-labs-find-outlook-emails/manifest Signed lockfile GET /api/skills/whitefield-labs-find-outlook-emails/lockfile

Test it

Using "find-outlook-emails". Find my recent Outlook emails from Priya about renewal timing.

Expected outcome:

Found three matching emails. The latest message asks for updated renewal terms, and Rarefriend notes show a prior budget concern from June.

Using "find-outlook-emails". What is the history with Morgan from Northstar?

Expected outcome:

The email thread discusses onboarding dates, support expectations, and a pending security review. Rarefriend notes mention Morgan prefers concise written follow-ups.

Using "find-outlook-emails". Connect my Outlook email to Rarefriend.

Expected outcome:

The assistant checks integration status and provides a time-limited connection link when Microsoft email is not connected.

Security Audit

Medium Risk

v5 • 7/7/2026 Open versioned report

Most static findings are false positives caused by Markdown backticks, product URLs, and documented MCP configuration paths. Two setup lines remain confirmed because they direct users to run or configure a third-party MCP package with OAuth credentials. The main residual risks are credential handling and sensitive Outlook and CRM data access.

Files scanned

219

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (2)

Medium

SKILL.md:20-25 SKILL.md:52-53 references/SETUP.md:13-17 references/SETUP.md:26-31

Third-Party MCP Package Runs With OAuth Credentials

The setup flow asks users to run or configure @rarefriend-ai/mcp with Rarefriend OAuth client credentials. This may be expected, but it gives a third-party MCP package access to sensitive integration credentials.

The documentation explicitly names the npm package and shows OAuth client ID and secret values passed to the MCP server. The risk is contextual credential exposure, not hidden behavior.

Medium

SKILL.md:41-43 SKILL.md:63-96 SKILL.md:101-104

Sensitive Email and CRM Data Access

The skill is designed to search Outlook messages and combine them with CRM contacts and notes. This handles private communications and relationship data, so users need clear consent and least-privilege boundaries.

The workflow descriptions directly list Outlook email search, sender lookup, CRM profiles, notes, and combined summaries. This is core functionality and therefore a high-confidence data sensitivity finding.

Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:52

Ruby/shell backtick execution

2. **Claude Code / Codex:** run `claude mcp add rarefriend -e RAREFRIEND_CLIENT_ID=your_id -e RAREFR

This line instructs users to run a shell command that invokes npx -y @rarefriend-ai/mcp and passes OAuth client credentials as environment variables. The setup may be legitimate, but it executes a third-party package with sensitive email integration access.

Medium

SKILL.md:53

Ruby/shell backtick execution

3. **Cursor:** add to `~/.cursor/mcp.json` under `mcpServers.rarefriend` with `command: npx`, `args:

This line tells Cursor users to configure an MCP server with command npx, package arguments, and secret environment variables. It is intended setup, but it causes the client to execute an external npm package with credentials.

Risk Factors

📁 Filesystem access (6)

references/SETUP.md:20 references/SETUP.md:40 references/SETUP.md:20 references/SETUP.md:40 SKILL.md:53 SKILL.md:53

⚙️ External commands (37)

🌐 Network access (4)

SKILL.md:35 SKILL.md:36 SKILL.md:43 SKILL.md:51

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/whitefield-labs-find-outlook-emails/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/whitefield-labs-find-outlook-emails/security.svg)](https://skillstore.io/skills/whitefield-labs-find-outlook-emails?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/whitefield-labs-find-outlook-emails?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/whitefield-labs-find-outlook-emails/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/whitefield-labs-find-outlook-emails.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

Whitefield-Labs. (2026). find-outlook-emails security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/whitefield-labs-find-outlook-emails/audits/5

BibTeX citation

@techreport{whitefield-labs-whitefield-labs-find-outlook-emails-2026,
  author = {Whitefield-Labs},
  title = {find-outlook-emails security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/whitefield-labs-find-outlook-emails/audits/5},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "find-outlook-emails security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
  - name: "Whitefield-Labs"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/whitefield-labs-find-outlook-emails/audits/5"
identifiers:
  - type: other
    value: "skillstore:whitefield-labs-find-outlook-emails:audit:5"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Prepare before a customer call

Find recent Outlook threads and review CRM notes before speaking with a contact.

Track a pending reply

Search a sender or subject to confirm whether an expected response arrived.

Rebuild relationship history

Combine email threads with Rarefriend notes to summarize prior discussions with a person.

Try These Prompts

Show recent emails

Show my latest Outlook emails and include sender, subject, date, and a short summary for each one.

Search by sender

Find Outlook emails from Alex Rivera this month, then show the most relevant threads first.

Connect email and contact context

Find recent emails from Jordan Lee, look up the Rarefriend contact record, and summarize the email history with CRM notes.

Prepare a relationship briefing

Search Outlook for contract discussions with Acme, cross-reference the senders in Rarefriend, and prepare a concise follow-up briefing.

Best Practices

Confirm the Rarefriend MCP connection before searching Outlook data.
Use focused sender, subject, and date filters to reduce irrelevant email results.
Ask before writing email-derived context into CRM notes.

Avoid

Do not search broad inbox history when a specific sender or subject is available.
Do not expose OAuth client secrets in shared prompts, screenshots, or repositories.
Do not summarize private email threads for users who should not access them.

Frequently Asked Questions

What account do I need?

You need a Rarefriend account, Rarefriend MCP credentials, and access to the Microsoft Outlook mailbox you want to search.

Does this skill read my whole inbox automatically?

No. It uses Rarefriend MCP tools when you ask for email listing, search, or relationship context.

Can it connect Outlook for me?

It can start the Microsoft email connection flow and return a connection link when the integration is not active.

Can it search by email address?

Yes. The documented search workflow supports sender name, sender email, subject, keyword, and body snippet matches.

Does it update CRM notes?

The workflow can create Rarefriend notes, but users should approve any note content before it is saved.

Can I use it in Claude Code and Codex?

Yes. The skill documents setup for Claude Code, Codex, Cursor, Claude Desktop, and compatible Agent Skills clients.

Developer Details

Author

Whitefield-Labs

License

MIT-0

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/Whitefield-Labs/rarefriend-skills/tree/main/skills/find-outlook-emails

Ref

36e07d5e13068e5be64447e8f20b427cf2cbd21a

Maintenance freshness

7/18/2026

Usage

1 downloads · 0 views

File structure

📁 references/

📄 SETUP.md

📄 SKILL.md