Skip to main content

m365-entra-attack

Explores Microsoft 365 Entra ID red-team attack vectors, providing insights on credential attacks and bypass techniques.

Install this skill

or
93/100

Security score

The m365-entra-attack skill was audited on May 26, 2026 and we found 3 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 264

Prompting for password/secret input

SourceSKILL.md
264await page.locator('input[name="passwd"], input[type="password"]').first.fill(password)
low line 172

External URL reference

SourceSKILL.md
172"resource": "https://graph.windows.net",
low line 184

External URL reference

SourceSKILL.md
184"https://login.microsoftonline.com/common/oauth2/token",
Scanned on May 26, 2026
View Security Dashboard
Installation guide →