Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add personamanagmentlayer/pcl --skill microsoft365-expertgit clone --depth 1 https://github.com/personamanagmentlayer/pclWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/personamanagmentlayer/pcl/microsoft365-expert)<a href="https://agentmods.dev/skills/personamanagmentlayer/pcl/microsoft365-expert"><img src="https://agentmods.dev/badge/skills/personamanagmentlayer/pcl/microsoft365-expert/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/personamanagmentlayer/pcl/microsoft365-expert"><img src="https://agentmods.dev/badge/skills/personamanagmentlayer/pcl/microsoft365-expert.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00078 | $0.01159 |
| Opus 5 | $0.00039 | $0.00580 |
| Sonnet 5 | $0.00016 | $0.00232 |
| Haiku 4.5 | $0.00008 | $0.00116 |
Grade A, and why
microsoft365-expert scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 169 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Microsoft 365 Expert
Core Concepts
Microsoft 365 Services
- Exchange Online - Email and calendar services
- SharePoint Online - Document management and collaboration
- Microsoft Teams - Chat, meetings, and collaboration
- OneDrive - Personal cloud storage
- Power Platform - Low-code/no-code app development
- Microsoft 365 Apps - Office applications (Word, Excel, PowerPoint)
Power Platform
- Power Apps - Custom business applications
- Power Automate - Workflow automation
- Power BI - Business intelligence and analytics
- Power Virtual Agents - Chatbot creation
- Dataverse - Business data platform
- Connectors - Integration with external services
Graph API
- Users & Groups - Identity and access management
- Mail & Calendar - Email and scheduling
- Files & Sites - Document management
- Teams - Chat and collaboration
- Planner - Task management
- Authentication - OAuth 2.0 and OpenID Connect
Best Practices
Microsoft 365 Administration
- Implement multi-factor authentication (MFA)
- Use conditional access policies
- Regular security audits and compliance reviews
- Implement data loss prevention (DLP) policies
- Use sensitivity labels for data classification
- Monitor usage analytics
Power Platform Development
- Follow naming conventions for apps and flows
- Implement proper error handling
- Use environment variables for configuration
- Test in development before production
- Document complex formulas
- Use connections securely
Graph API Integration
- Use application permissions appropriately
- Implement proper token caching
- Handle rate limiting and throttling
- Use batch requests for multiple operations
- Implement retry logic with exponential backoff
- Log API calls for troubleshooting
SharePoint Best Practices
- Use modern sites over classic
- Implement proper information architecture
- Use content types for consistency
- Apply metadata for better organization
- Regular backup and retention policies
- Optimize page performance
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 169 lines · 78 tokens per session scan A 69f731af1c95
microsoft365-expert is a skill published in the GitHub repository personamanagmentlayer/pcl (40 stars, last pushed 2d ago), licensed Apache-2.0. It adds 78 tokens to every session and 1,159 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.
Other skills, from other repositories
deploy
Builds and deploys a Power Apps code app to Power Platform. Use when deploying changes, redeploying an existing app, or pushing updates.
power-automate
Use when operating Microsoft Power Automate cloud flows from code — create, enable, update, list or delete via the Dataverse Web API (workflow table, category 5) with Entra ID OAuth2, plus run-history debugging. NOT designing the flow definition (that is automation-flows), NOT picking a platform by billing model (that…
configure-nginx
Configure Nginx as a web server and reverse proxy. Covers static file serving, reverse proxy to upstream services, SSL/TLS termination with Let's Encrypt, location blocks, load balancing, rate limiting, and security headers. Use when serving static files in production, reverse proxying to backend services (Node.js…
configure-reverse-proxy
Configure reverse proxy patterns across multiple tools including Nginx, Traefik, and ShinyProxy. Covers WebSocket proxying, path-based and host-based routing, SSL termination, and Docker label auto-discovery. Use when routing multiple services behind a single entry point, proxying WebSocket connections (Shiny…
pipedream-workflows
Use when pipedream serverless workflows — triggers, code steps, pre-built actions, data stores, HTTP. Use when working with pipedream workflows.
configure-api-gateway
Deploy and configure an API gateway (Kong or Traefik) to handle API traffic management, authentication, rate limiting, request/response transformation, and routing. Covers plugin configuration, upstream services, consumer management, and integration with existing infrastructure. Use when multiple backend services need…