automation

ScubaGear: Automate M365 Security

Name: ScubaGear: Automate M365 Security
Author: cisagov

Assess your M365 tenant's security with ScubaGear, a tool for startup founders, backed by 2.6k+ GitHub stars.

intermediate⏱ 30 minutes💵 Free

2,707 stars+17★ this week387 forksPowerShellGuide quality 8/10 · reviewed Jun 6Updated 10/9/2026100% free · open source

What it is

Use ScubaGear to check the security level of your Microsoft 365 (M365) tenant.

Real use case example

"A founder with a growing M365 tenant uses ScubaGear to assess their security and gets a detailed report, finding some vulnerabilities they can easily fix within a few days."

Best insideAny AI Client

When to use it

•When you need to identify potential security risks in your M365 tenant
•Before a security audit or compliance check
•After making significant changes to your M365 configuration

Ready-to-paste prompt

.\ScubaGear.ps1 -TenantId abc123 -ClientId def456 -ClientSecret ghi789 -OutputFile security_report.csv

Heads up: You need to have the AzureAD and ExchangeOnlineManagement PowerShell modules installed and configured to use ScubaGear, and you must have the necessary permissions to access your M365 tenant

Saves to your device

Use with Claude

New

Skip the builder — one click puts this in Claude, Cursor, Antigravity and more.

🛠️ Technical setup

Expect 20–40 minutes in a terminal — or let your AI agent drive it.

Try it instantly — no install

Claude Code

mkdir -p ~/.claude/skills/scubagear && curl -fsSL https://workflowstacks.com/api/skills/scubagear/claude-skill -o ~/.claude/skills/scubagear/SKILL.md

Open in another AI app

Opens the app with this repo with the prompt ready to go — no copy-paste needed.

Connect the whole catalog (MCP)

claude mcp add --transport http workflowstacks https://workflowstacks.com/api/mcp

Adds a WorkflowStacks connector to Claude Code: search and load any skill here by chatting.

How ScubaGear: Automate M365 Security works

Codeflow

Free to inspect

ScubaGear: Automate M365 Security is a medium PowerShell project (~5.6k lines across 31 code files, plus 133 test files). Expect some technical setup — comfortable with a terminal, or ask a developer. Last commit this month, CC0-1.0 license, has a test suite.

Size

Medium codebase

~5.6k lines · 31 code files · 46 min skim

Setup

Some technical setup

Comfortable with a terminal? 20–40 min. Otherwise ask a dev.

Runs on

PowerShell

No API keys detected

PowerShell 63%Open Policy Agent 19%HTML 15%JavaScript 2%

Where to start reading

1
README.md
Start here — what it does and how to install it
2
AGENTS.md
The instructions the AI actually follows

What's in each folder

docs/Documentation66 files

PowerShell/Folder369 files

utils/Helper scripts20 files

baselines/Folder1 files

sample-report/Folder1 files

Testing/Tests — proof it works65 files

.github/CI / automation (GitHub Actions)41 files

images/Images & static assets8 files

READMEHas testsDocumentedCI checksCC0-1.0 licenseUpdated this month

Use with Claude

New

Skip the builder — one click puts this in Claude, Cursor, Antigravity and more.

🛠️ Technical setup

Expect 20–40 minutes in a terminal — or let your AI agent drive it.

Try it instantly — no install

Claude Code

mkdir -p ~/.claude/skills/scubagear && curl -fsSL https://workflowstacks.com/api/skills/scubagear/claude-skill -o ~/.claude/skills/scubagear/SKILL.md

Open in another AI app

Opens the app with this repo with the prompt ready to go — no copy-paste needed.

Connect the whole catalog (MCP)

claude mcp add --transport http workflowstacks https://workflowstacks.com/api/mcp

Adds a WorkflowStacks connector to Claude Code: search and load any skill here by chatting.

Quick Actions

Details

Creator

cisagov

Language

PowerShell

Do this with a working workflow

Pages we wrote and tested that put a skill like this to work — importable n8n templates, outcome guides and Claude Desktop configs.

Outcome guide

Automate your weekly client reports

Keep each client’s metrics in a Google Sheet. Every Monday the workflow reads the week’s numbers, writes a plain-English narrative — what moved, why, and what’s next — and emails it to the client.