AgentSkillsCN

sharepoint-audit

本地执行SharePoint审计并提供指南。收集输入，确认PowerShell 7.4+和Python 3.10+可用，通过封装调用带有证书认证的PowerShell，解析audit.json，并渲染Markdown/HTML。仅使用本地shell命令。

SKILL.md
--- frontmatter
name: sharepoint-audit
description: >
  Guide and run a SharePoint audit locally. Collect inputs, confirm PowerShell 7.4+
  and Python 3.10+ are available, call PowerShell with certificate auth via wrapper,
  parse audit.json, and render Markdown/HTML. Use only local shell commands.

SharePoint Audit Skill

When to use

  • •A user needs to audit SharePoint Online permissions for one site or a CSV-defined batch.
  • •The operator can run PowerShell 7.4+, Python 3.10+, and PnP.PowerShell locally.

What to do

  1. •Ask for: Tenant ID, App (Client) ID, PFX path, internal domains, site URL or CSV, and confirm PFX_PASS is set.
  2. •Run:
    • •pwsh ./sharepoint-audit-agent/agent/powershell/Install-Modules.ps1
    • •python ./sharepoint-audit-agent/agent/python/audit_agent.py … --output ./runs
  3. •On success, show ./runs/<timestamp>/site-*/report.html and remind the user that the file contains sensitive data.

Rules

  • •Only run local commands. Do not fetch from the internet beyond module installs.
  • •Never echo secrets. Read PFX password from env var.
  • •Default Sites.Selected scope to Read; only pass --sites-selected-permission Write if the user explicitly authorizes it.