Skill UI

This SDK provides comprehensive tools for developing enterprise-grade, multi-channel agents for the Microsoft 365 ecosystem. Utilizing ASP.NET Core hosting, it supports integration with Teams, Copilot Studio, and general M365 services. Key features include robust agent application routing, structured state management, and secure authentication using MSAL.

Develop robust, multi-channel enterprise agents designed for the Microsoft 365 ecosystem, including Teams and Copilot Studio. This SDK provides a comprehensive Python framework featuring aiohttp hosting, advanced AgentApplication routing, real-time streaming responses, and secure authentication via MSAL. Ideal for building sophisticated, production-grade bots and automation tools that integrate deeply with enterprise Microsoft services.

This comprehensive SDK provides tools for building enterprise-grade AI agents integrated across the Microsoft 365 ecosystem, including Teams and Copilot Studio. It supports advanced features such as Express hosting, structured routing, streaming responses via Azure OpenAI, and direct client integration, enabling developers to build sophisticated business automation solutions.

A comprehensive tool suite for Global Administrators to automate Microsoft 365 tenant setup, user lifecycle management, and security hardening. It provides PowerShell and Python generators for bulk user provisioning, implementing Conditional Access policies (MFA), running security audits, and ensuring compliance across Azure AD, Exchange Online, and Teams.

A comprehensive guide to securing Software as a Service (SaaS) applications (e.g., Microsoft 365, Salesforce) using Zero Trust principles. This skill covers deploying CASB/SSPM solutions, enforcing conditional access policies (MFA, device compliance), governing OAuth permissions, and applying session-level DLP controls to prevent data exfiltration in multi-cloud environments. Ideal for security architects and engineers.

Query authoritative Microsoft documentation to explain Azure, .NET, M365, Windows, and Power Platform concepts, tutorials, limits, configurations, or best practices whenever a user wants to understand how something works.

Guides agents through researching Microsoft technologies via Learn MCP docs, then scaffolds hybrid skills that store essential knowledge locally while enabling dynamic lookups for depth.

A comprehensive guide for developers to build advanced, declarative agents for Microsoft 365 Copilot. This skill details the integration process using a Model Context Protocol (MCP) server, allowing the agent to connect with external systems, select tools, and handle complex authentication (OAuth 2.0/SSO). You will learn to generate key JSON manifests required for deployment.

Deploy and govern MCP declarative agents within the Microsoft 365 admin center, managing their lifecycle, assignments, access controls, and compliance so Copilot delivers organizational capabilities securely.

This tool generates a complete, structured TypeSpec declarative agent definition tailored for Microsoft 365 Copilot. It systematically creates necessary components including detailed role instructions, conversation starters, and a comprehensive list of required capabilities (e.g., WebSearch, OneDrive, Teams, CodeInterpreter). This ensures the agent is fully functional and ready for deployment within the M365 ecosystem.

A comprehensive guide detailing the reference architecture for connecting to OneNote via the Microsoft Graph API. It covers the distinct API paths, permission models, and object hierarchies for personal (OneDrive), SharePoint, and Microsoft 365 Group notebooks, ensuring seamless design for multi-tenant, enterprise-level integrations.

GraphRunner is a powerful PowerShell toolset built on the Microsoft Graph API, designed for authorized red-teaming engagements against M365/Entra ID tenants. After obtaining a valid Graph token, it enables reconnaissance, establishes persistence (e.g., injecting OAuth apps and inbox rules), performs privilege escalation, and exfiltrates sensitive data from mailboxes, SharePoint, and Teams. Use only in authorized testing environments.