m365-entra-attack
Explores Microsoft 365 Entra ID attack vectors, providing insights for credential attacks and user enumeration scenarios.
Install this skill
or
93/100
Security score
The m365-entra-attack skill was audited on May 29, 2026 and we found 3 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 264
Prompting for password/secret input
SourceSKILL.md
| 264 | await page.locator('input[name="passwd"], input[type="password"]').first.fill(password) |
low line 172
External URL reference
SourceSKILL.md
| 172 | "resource": "https://graph.windows.net", |
low line 184
External URL reference
SourceSKILL.md
| 184 | "https://login.microsoftonline.com/common/oauth2/token", |
Scanned on May 29, 2026
View Security Dashboard