microsoft/install-atk
plugins/microsoft-365-agents-toolkit/skills/install-atk/SKILL.md
Install or update the M365 Agents Toolkit (ATK) CLI and VS Code extension. Triggers: "install atk", "update atk", "install agents toolkit", "update agents toolkit", "install the toolkit", "setup atk", "get atk", "install atk cli", "install atk extension", "install atk vsix", "update the vs code extension", "install latest atk", "upgrade atk"
$ install --global
skillsauthnpx skillsauth add microsoft/work-iq install-atkInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 16, 2026, 6:28 AM222.9s1 file scanned
SKILL.md
- name:
- install-atk
- description:
- >
- Triggers:
- install atk", "update atk", "install agents toolkit", "update agents toolkit",
Install ATK
Install or update the M365 Agents Toolkit (ATK) CLI and/or VS Code extension.
Telemetry Tagging
Before running any atk CLI commands, set the session environment variable so all CLI invocations are tagged as skill-initiated:
export ATK_CLI_SKILL=true
Run this once at the start of the session. All subsequent atk commands in the same terminal will inherit it.
Triggers
This skill activates when the user asks to:
- Install or update ATK / Agents Toolkit / the toolkit
- Install or update the ATK CLI
- Install or update the ATK VS Code extension / VSIX
- Set up ATK / get started with ATK
Behavior
ATK CLI commands use npx -y --package @microsoft/m365agentstoolkit-cli atk which automatically downloads and runs the latest version — no global installation is needed.
When triggered, determine what the user wants:
| User intent | Action | |-------------|--------| | Install/update everything or just "ATK" | Verify CLI works + install VSIX | | Install/update CLI only | Verify CLI works (npx handles it automatically) | | Install/update extension / VSIX only | Install VSIX only | | Ambiguous | Verify CLI works + install VSIX |
Commands
Step 1: Verify ATK CLI works
npx -y --package @microsoft/m365agentstoolkit-cli atk --version
- If this succeeds (prints a version): ATK CLI is available. The
npxprefix automatically downloads the latest package on first use and caches it for subsequent runs. - If this fails: Check that Node.js 18+ and npm are installed. The
npxcommand requires a working Node.js environment.
Step 2: ATK VS Code Extension (if requested)
code --install-extension TeamsDevApp.ms-teams-vscode-extension
Execution
- Verify ATK CLI works by running
npx -y --package @microsoft/m365agentstoolkit-cli atk --version - Report the result (version number / failure)
- Install VS Code extension if requested
- Explain that all ATK commands use the
npx -y --package @microsoft/m365agentstoolkit-cli atkprefix — no global install needed
Safety Rules
- MUST NOT skip errors — report failures clearly to the user
- MUST use the exact package names and extension IDs above — do not substitute with other names or links
Related Skills
microsoft/planner-status-report
business
VerifiedTrustedCommunity
Generates a Microsoft Planner status report for one plan, using task status, owners, dates, priorities, buckets, risks, wins, progress, upcoming commitments, and milestones.
975SKILL.mdUpdated Aug 25, 2026
microsoft/setup-sso-ui-widget
tools
VerifiedTrustedCommunity
Adds Microsoft Entra SSO (single sign-on, no OBO) to a Microsoft 365 Copilot declarative agent whose tools are served by an MCP server — for BOTH widget standards: (1) the MCP Apps standard (from create-mcp-app / the MCP Apps SDK): a plugin manifest such as readiness_plugin.json (or another *_plugin.json with a runtimes[] block) and an EXPRESS-based MCP server; and (2) the OpenAI Apps (OAI Apps) layout from the ui-widget-developer skill: appPackage/mcpPlugin.json and a raw-http MCP server. When the layout is ambiguous, DEFAULT to the MCP Apps standard (most projects use it). The skill auto-detects the layout, reuses the existing named devtunnel + env/.env.local (never creates a second tunnel), registers the Entra app + ATK OAuth (MicrosoftEntra), patches the plugin manifest's runtimes[] auth to OAuthPluginVault, injects a minimal JWKS bearer-token guard into the existing server (an EXPRESS middleware for MCP Apps, or a raw-http guard WITHOUT rewriting to Express for OAI Apps), validates, sideloads, and prints an app-registration summary. SSO only — no OBO. Triggered by: "add sso to my mcp server", "wire entra sso for my copilot agent", "setup sso for mcp apps", "add sso after create-mcp-app", "add sso after ui-widget-developer", "add entra auth to my express mcp server", "configure only sso no obo"
975SKILL.mdUpdated Aug 25, 2026
microsoft/ui-widget-developer
tools
VerifiedTrustedCommunity
Build MCP servers for Copilot Chat using the OpenAI Apps SDK or MCP Apps SDK widget rendering support (any language). Use this skill when: - Creating MCP servers that integrate with M365 Copilot declarative agents - Building rich interactive widgets (React + Fluent UI) that render in Copilot Chat - Implementing tools that return structuredContent for widget rendering - Adapting an existing MCP server to support Copilot widget rendering - Setting up devtunnels for localhost MCP server exposure - Configuring mcpPlugin.json manifests with RemoteMCPServer runtime Do NOT use this skill for general agent development (scaffolding, manifests, deployment) — use declarative-agent-developer instead. This skill is ONLY for MCP server + widget development. Triggers: "MCP server for Copilot", "OpenAI Apps SDK", "Copilot widget", "structuredContent", "MCP plugin", "devtunnels MCP", "OAI app", "widget rendering", "UI widget"
975SKILL.mdUpdated May 16, 2026
microsoft/site-explorer
tools
VerifiedTrustedCommunity
Browse and discover SharePoint sites, lists, document libraries, and file contents — navigate your SharePoint world without leaving the CLI.
881SKILL.mdUpdated May 16, 2026