A guide and set of scripts for managing SharePoint, Microsoft's platform for team sites, document libraries, lists, and pages, through the Microsoft Graph API.

It helps create lists and columns, add list items, upload files up to 250 MB, create and publish pages, and create group-connected team sites.

It avoids requiring a new Entra application registration, which many organisations restrict, while reusing delegated sign-in through Microsoft Graph PowerShell.

How geekfujiwara/CodeAppsDevelopmentStandard configures Claude Code an

Reuse

Borrowing it

Nothing to install: this file belongs to geekfujiwara/CodeAppsDevelopmentStandard. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/geekfujiwara/CodeAppsDevelopmentStandard/main/.github/skills/sharepoint/SKILL.md

Clone the repo

git clone --depth 1 https://github.com/geekfujiwara/CodeAppsDevelopmentStandard

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/geekfujiwara/codeappsdevelopmentstandard/sharepoint/github.svg)](https://agentmods.dev/skills/geekfujiwara/codeappsdevelopmentstandard/sharepoint)

Your own site

<a href="https://agentmods.dev/skills/geekfujiwara/codeappsdevelopmentstandard/sharepoint"><img src="https://agentmods.dev/badge/skills/geekfujiwara/codeappsdevelopmentstandard/sharepoint/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/geekfujiwara/codeappsdevelopmentstandard/sharepoint"><img src="https://agentmods.dev/badge/skills/geekfujiwara/codeappsdevelopmentstandard/sharepoint.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 107 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 2,725 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector pass 7 Sept 2026

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00107	$0.02725
Opus 5.5	$0.00043	$0.01090
Sonnet 5.5	$0.00021	$0.00545
Haiku 4.5	$0.00011	$0.00272

Measured 17d ago against content hash 7d0abe730e9a, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

sharepoint scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 17d ago.

The scan reads SKILL.md. This mod also ships 6 executable files (scripts/_graph_common.py, scripts/create_list_item.py, scripts/create_list.py, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.github/skills/sharepoint/SKILL.md · 158 lines

How it starts

The opening of the file, as written. The whole thing — 158 lines — stays where its author put it; the contents beside it link to each section on GitHub.

SharePoint スキル（Graph API・AAD アプリ登録不要）

Microsoft Graph API で SharePoint を操作する。新規の Entra アプリ登録を行わない。 組織によっては一般ユーザーにアプリ登録権限が無いことが多く、そのハードルを避けるため、Microsoft 製の well-known パブリッククライアント（Microsoft Graph PowerShell）への委任同意だけで完結させる。

Code Apps から呼ばれたときの境界

SharePoint URL だけでは直接接続の指示と解釈しない。 明示的な直接接続・継続利用の指定がなければ、URL は仕様・移行元の参照情報であり、業務データを Dataverse に移行して Code Apps を開発する。このスキルのトリガーに URL が一致しても、SharePoint リストの新規作成や書き込み、 shared_sharepointonline の追加を自動実行しない。既存データの移行は dataverse と data-migration に渡す。移行元の取得には依頼者の読み取り権限・対象範囲の確認が必要で、URL の受領だけを操作承認としない。 SharePoint 自体の作成・編集を明示依頼された場合は、以下の手順を使う。

対応する操作

操作	スクリプト	Graph API
リスト（ドキュメントライブラリ）・列の作成	scripts/create_list.py	`POST /sites/{id}/lists`, `POST /sites/{id}/lists/{id}/columns`
リスト項目（行）の登録	scripts/create_list_item.py	`POST /sites/{id}/lists/{id}/items`
ファイルアップロード（≤250MB）	scripts/upload_file.py	`PUT /sites/{id}/drive/root:/{path}:/content`
サイトページの作成・公開	scripts/create_page.py	`POST /sites/{id}/pages`, `POST .../pages/{id}/microsoft.graph.sitePage/publish`
サイト作成（M365 グループ連携チームサイト・間接）	scripts/create_site.py	`POST /groups` → `GET /groups/{id}/sites/root`

サイトの更新・削除、グループ非連携のコミュニケーションサイト作成は Graph v1.0 に汎用 API が無く未対応。 詳細・回避策は references/troubleshooting.md を参照。

前提

standard スキルの auth_helper.py が使えること（.env に TENANT_ID 設定済み）
対象 SharePoint サイトの URL（例: https://{tenant}.sharepoint.com/sites/{site}）
書き込み権限を持つアカウントでサインインできること（Sites.ReadWrite.All 等の委任スコープは Admin 同意が必要な場合がある。管理者アカウントでの初回同意を推奨）

なぜ既定の認証クライアントでは失敗するか

auth_helper.py の既定クライアント（Azure CLI 互換）には SharePoint 書き込み系スコープ（Sites.ReadWrite.All 等）が事前同意されていないため、書き込み系操作（POST/PUT）が 403 Forbidden になる（読み取り専用の GET は通ることが多く紛らわしい）。

新しい Entra アプリを登録すれば権限を自由に設計できるが、組織によってはアプリ登録自体が一般ユーザーに許可されていないことが多い。そこで、Microsoft が既に multi-tenant で公開・運用している Microsoft Graph PowerShell のクライアント ID （14d82eec-204b-4c2f-b7e8-296a70dab67e、全スクリプトの既定値）を使う。これは対象テナントに新規アプリを登録する必要がなく、初回のみそのクライアントへの委任スコープ同意（管理者同意が必要な場合あり）を行うだけで済む。

Read the full file on GitHub · 158 lines

Files

What ships with it

9 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

17d ago Changed · +11 lines 7d0abe730e9a
2mo ago First seen · 147 lines · 107 tokens per session scan A 05e5680a2738

Subscribe to this mod's changes

sharepoint is a skill published in the GitHub repository geekfujiwara/CodeAppsDevelopmentStandard (78 stars, last pushed yesterday), licensed MIT. It adds 107 tokens to every session and 2,725 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Backend and APIs Documents architecture

sharepoint next to 6 skills from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
sharepointgeekfujiwara/CodeAppsDevelopmentStandard	Skill	78	yesterday	MIT	A	107	Claude Code, Codex
code-to-diagramzebbern/claude-code-guide	Skill	4.7k	3d ago	MIT	A	74	Claude Code, Codex
excel2jsonCoderWanFeng/python-office	Skill	1.4k	8d ago	Apache-2.0	A	51	Claude Code, Codex
nw-diagramnWave-ai/nWave	Skill	631	yesterday	MIT	A	33	Claude Code
product-data-cleanupAlpacaLabsLLC/skills-for-architects	Skill	402	3d ago	MIT	A	42	Claude Code
rag-web-fallbacklyonzin/knowledge-rag	Skill	301	today	MIT	A	61	Claude Code, Codex
frontmcp-guidesagentfront/frontmcp	Skill	148	yesterday	Apache-2.0	A	157	Claude Code, Codex

CodeAppsDevelopmentStandard: Skill for Claude Code