Skill UI

A comprehensive guide for developers to build advanced, declarative agents for Microsoft 365 Copilot. This skill details the integration process using a Model Context Protocol (MCP) server, allowing the agent to connect with external systems, select tools, and handle complex authentication (OAuth 2.0/SSO). You will learn to generate key JSON manifests required for deployment.

Deploy and govern MCP declarative agents within the Microsoft 365 admin center, managing their lifecycle, assignments, access controls, and compliance so Copilot delivers organizational capabilities securely.

Defines TypeSpec API plugin CRUD operations for Microsoft 365 Copilot, wiring GET/POST/PATCH/DELETE routes with parameters, adaptive-card responses, and confirmation prompts to illustrate a complete REST experience.

This tool generates a complete, structured TypeSpec declarative agent definition tailored for Microsoft 365 Copilot. It systematically creates necessary components including detailed role instructions, conversation starters, and a comprehensive list of required capabilities (e.g., WebSearch, OneDrive, Teams, CodeInterpreter). This ensures the agent is fully functional and ready for deployment within the M365 ecosystem.

Generate a TypeSpec API plugin tailored for Microsoft 365 Copilot, wiring REST operations, authentication flows, confirmation cards, and Adaptive Cards into a guided workflow so Copilot can interact with external services securely.

Guides Copilot through the WorkIQ CLI/MCP server to fetch live Microsoft 365 data—emails, meetings, docs, Teams chatter, and people info—providing context, summaries, blockers, and follow-up recommendations for planning or action.

A comprehensive guide detailing the reference architecture for connecting to OneNote via the Microsoft Graph API. It covers the distinct API paths, permission models, and object hierarchies for personal (OneDrive), SharePoint, and Microsoft 365 Group notebooks, ensuring seamless design for multi-tenant, enterprise-level integrations.

A comprehensive guide for integrating Microsoft Graph SDK into applications. It covers accessing Microsoft 365 data (users, mail, calendar, Teams, SharePoint) from various languages (.NET, Python, TypeScript). Key topics include robust authentication patterns (Managed Identity, OBO), advanced data retrieval techniques like pagination, delta queries, batch requests, and setting up change notifications via webhooks. Learn best practices for secure and efficient API interaction.

This skill simulates advanced red-teaming techniques targeting Microsoft Entra ID's OAuth 2.0 device-code flow and illicit consent mechanisms. It demonstrates how attackers can steal access and refresh tokens, bypass Multi-Factor Authentication (MFA), and pivot across various Microsoft 365 services. It is designed for authorized security testing to validate token protection and conditional access policies.

This PowerShell toolset performs advanced post-exploitation, reconnaissance, persistence, and data exfiltration against Microsoft 365/Entra ID tenants using the Microsoft Graph API. It operationalizes stolen Graph tokens to enumerate users, dump policies, escalate privileges, and search sensitive data across mailboxes, SharePoint, and Teams. Essential for authorized red teaming engagements.