- name
- sharepoint-by-altf1be
- description
- Secure SharePoint file operations and Office document intelligence via Microsoft Graph API — certificate auth, Sites.Selected, read/write Word (mammoth), Excel (exceljs), PowerPoint (jszip), PDF (pdf-parse).
- homepage
- https://github.com/ALT-F1-OpenClaw/openclaw-skill-sharepoint
- metadata
SharePoint by @altf1be
Interact with SharePoint document libraries via Microsoft Graph API using certificate-based authentication.
Setup
- Create an Entra app with
Sites.Selectedpermission and certificate auth - Grant site-level write access via Microsoft Graph PowerShell
- Set environment variables (or create
.envin{baseDir}):
SP_TENANT_ID=your-azure-tenant-id
SP_CLIENT_ID=your-app-client-id
SP_CERT_PATH=/path/to/certificate.pem
SP_SITE_ID=your-sharepoint-site-id
SP_DRIVE_ID=optional-specific-drive-id- Install dependencies:
cd {baseDir} && npm install
Commands
File operations
# Show site and drive info
node {baseDir}/scripts/sharepoint.mjs info
# List files in library root
node {baseDir}/scripts/sharepoint.mjs list
# List files in a subfolder
node {baseDir}/scripts/sharepoint.mjs list --path "Meeting Notes/2026"
# Read file content (extracts text from Office formats)
node {baseDir}/scripts/sharepoint.mjs read --path "Report.docx"
# Upload a file
node {baseDir}/scripts/sharepoint.mjs upload --local ./report.docx --remote "Reports/Q1-2026.docx"
# Search for files
node {baseDir}/scripts/sharepoint.mjs search --query "quarterly review"
# Create folder
node {baseDir}/scripts/sharepoint.mjs mkdir --path "Meeting Notes/2026"
# Delete (requires --confirm flag)
node {baseDir}/scripts/sharepoint.mjs delete --path "Drafts/old-file.txt" --confirmCoauthoring (checkout/checkin)
# Safe edit: checkout → upload modified file → checkin (recommended)
node {baseDir}/scripts/sharepoint.mjs edit --path "Report.docx" --local ./modified.docx --comment "Updated summary"
# Check out a file (lock for exclusive editing)
node {baseDir}/scripts/sharepoint.mjs checkout --path "Report.docx"
# Check in a file (unlock + publish)
node {baseDir}/scripts/sharepoint.mjs checkin --path "Report.docx" --comment "Reviewed and approved"
# Get an edit link to open in Office Online
node {baseDir}/scripts/sharepoint.mjs edit-link --path "Report.docx"Supported Office formats
The read command extracts text content from:
.docx→ full text extraction via mammoth.xlsx→ sheet names + cell data via exceljs.pptx→ slide text extraction via jszip.pdf→ text extraction via pdf-parse.txt/.md→ raw content
Output is plain text suitable for AI processing (summarization, reformatting, action item extraction).
Dependencies
@azure/identity— certificate-based Azure AD authentication@microsoft/microsoft-graph-client— Microsoft Graph API clientmammoth— Word document text extractionexceljs— Excel spreadsheet parsingjszip— PowerPoint XML extractionpdf-parse— PDF text extractioncommander— CLI frameworkdotenv— environment variable loading
Security
- Certificate auth only (no client secrets, no passwords)
Sites.Selectedpermission (access limited to one SharePoint site)- Path traversal prevention:
../is rejected - Delete requires explicit
--confirmflag - No tokens or secrets printed to stdout
- File size limit: configurable max (default 50MB)
Full setup guide
For complete setup from scratch (Entra app, certificate, Sites.Selected, Key Vault): See the GitHub repository README.
Author
Abdelkrim BOUJRAF — ALT-F1 SRL, Brussels 🇧🇪 X: @altf1be