العمل
Write the Teams channel fence before you OAuth
Workplace chat connectors are useful — and they are a blast radius.
نقطة الألم
Ankit Agarwal (@kumarumt) posted a 10-point Teams pre-wire list for Grok Bot before OAuth on a solo or small team: which teams/channels it may read; which it may never touch (HR, legal, client-private); search yes, send default no; always_ask before any channel post or DM; no create-chat until a human names participants; Action Recording on if you have it (90-day scrubbed trail); MCP allowlist only the Teams server URL you intend; kill/revoke Microsoft consent in under 60s; never paste client PII into a prompt that can fan out; dry-run in a sandbox channel first. Author tip list — not a system prompt. Not affiliated with xAI.
ماذا تثبّت أو تنشئ
Write the fence first. Then OAuth. Search/read in a sandbox channel before any send. Keep revoke under a minute.
الروبوتات
Teams fence desk
Holds the channel fence. Search/read only until you unlock a named send.
الإضافات
Microsoft Teams
مطلوب
الملفات
Author pre-wire list: (1) which teams/channels it may read (2) never-touch (HR, legal, client-private) (3) search yes, send default no (4) always_ask before channel post or DM (5) no create-chat until a human names participants (6) Action Recording on if you have it — 90-day scrubbed trail (7) MCP allowlist: only the Teams server URL you intend (8) kill/revoke Microsoft consent in under 60s (9) never paste client PII into a prompt that can fan out (10) dry-run in a sandbox channel first.
الروتينات
لا شيء في التشغيل الأول. راقب تنفيذًا يدويًا واحدًا أولًا.
النص التوجيهي
هذه نصيحة، وليست نصًا توجيهيًا للنظام يمكن لصقه. لم ينشر المؤلف نصًا. اتبع خطوات التشغيل الأول.
التشغيل الأول
- 1Read https://x.com/kumarumt/status/2100384243016749295 — paste the 10-point fence into a note; do not invent a system prompt.
- 2Write which teams/channels it may read vs never-touch (HR, legal, client-private) before any OAuth.
- 3Add the Teams plugin; set search yes / send default no / always_ask before post or DM; ban create-chat until you name participants.
- 4Allowlist only the Teams MCP URL you intend; confirm you can revoke Microsoft consent in under 60s.
- 5Dry-run search/read in a sandbox channel. No client PII in prompts. Sends stay behind your yes.
حاجز الموافقة
Search may be on. Channel posts, DMs, and create-chat stay behind always_ask / your yes. No auto-send.
ما الذي تعدّله
Steal the channel fence. Connectors expand reach; the fence is the product.
المصدر
Ankit Agarwal @kumarumt · المنشور الأصلي
غير تابع لـ xAI. لم نكتب هذا النص التوجيهي. تبقى شروط القوالب التابعة لطرف ثالث سارية.
حزمة Pro
تريد الإعداد الكامل، لا الفكرة فقط؟
تمنحك حزم Pro وصف الوظيفة والنصوص التوجيهية والجداول والمزالق لحالات الاستخدام الشائعة.