Generated banner for Teams App Developer
Generated logo for Teams App Developer

Teams App Developer

MicrosoftOfficialPublished by Microsoft

  • Skill
  • Tool integration
  • Software development
  • MIT
  • Medium risk

From the author

Builds, tests, and deploys Microsoft 365 apps and agents for Teams and Copilot. Includes sub-skills for project creation, local testing, cloud deployment, troubleshooting, and Slack-to-Teams migration. USE FOR: Teams agent, bot, tab, message extension, Declarative Agents, Custom Engine Agents, local testing, Agents Playground, Azure resource provision, remote deployment, Slack to Teams migration, cross-platform bot development, Block Kit to Adaptive Cards conversion. DO NOT USE FOR: general web development, non-bot/non-Teams projects.
— the description by Microsoft

AutoGineer summary

Written by AutoGineer from the skill’s own files, not by the author

The teams-app-developer skill provides a structured framework for managing the lifecycle of Microsoft 365 agents and Teams applications. It leverages the ATK CLI to handle project scaffolding, local testing via the Agents Playground, cloud provisioning on Azure, and troubleshooting. The skill includes specialized guidance for migrating Slack bots to Teams, including converting Block Kit UI to Adaptive Cards, and provides access to an extensive library of micro-expert documentation for cross-platform development.

What it does

  • Scaffolds new Microsoft 365 agents and Teams applications from templates.
  • Facilitates local testing using the Agents Playground or Teams-specific environments.
  • Automates Azure resource provisioning and cloud deployment workflows.
  • Provides diagnostic procedures for common authentication and configuration errors.
  • Supports migration of Slack bots to the Teams platform.
  • Manages project configuration and environment variables for ATK-based projects.

When to use it

  • When starting a new Teams app, bot, or Declarative Agent project.
  • When you need to test an agent locally before deploying to the cloud.
  • When migrating existing Slack bots to the Microsoft Teams ecosystem.
  • When troubleshooting deployment or authentication issues in a Teams project.
  • When you need to provision Azure infrastructure for a Teams application.

Advantages

  • Streamlines the development lifecycle with standardized CLI commands.
  • Reduces development time by offering a local testing playground.
  • Provides expert-level guidance for complex cross-platform migrations.
  • Ensures consistent configuration management across development environments.
  • Includes robust error-handling protocols for common platform-specific pitfalls.

Usage examples

“Create a new Teams bot project using the default template.”
The agent will initialize a new project folder, configure the necessary YAML files, and guide you through the initial setup using the ATK CLI.
“How do I migrate my Slack bot to Microsoft Teams?”
The agent will initiate the slack-to-teams workflow, providing access to cross-platform bridging experts and guidance on converting UI components.
“My Teams bot is returning a 401 error, how do I fix it?”
The agent will trigger the troubleshooting workflow, checking your environment variables, tunnel status, and authentication configuration.

Install

  1. Download the skill as a ZIP:

    https://mp-staging.autogineer.com/agent-skills/microsoft/teams-app-developer/download
  2. Unzip it into the cross-client skills folder of your project:

    mkdir -p .agents/skills && unzip teams-app-developer.zip -d .agents/skills

Documentation by Microsoft

Microsoft 365 Agents Toolkit Skill

Build Microsoft 365 agents and Teams apps using the ATK CLI.

AI Behavior Guidelines

  1. Testing Strategy: Recommend Agents Playground first (faster, no M365 needed). Use Teams workflow only if user explicitly requests it.

  2. Environment Variables: NEVER hardcode secrets or make up placeholder values. Always ask users for real values.

  3. Error Handling: Read error messages carefully. Check env/.env.local, .localConfigs, and atk auth list. Common pitfalls:

    • AADSTS7000229 → aadApp/create missing generateServicePrincipal: true in YAML — add it and re-provision

    • Missing TENANT_ID in .localConfigs → SDK uses wrong token authority → 401 from Bot Connector

    • 401 persists after auth fix → devtunnel URL may be blacklisted — create a fresh tunnel

    • See troubleshoot/troubleshoot.md for full diagnostic steps

  4. Long-Running Commands — WAIT for completion:

    • atk new, atk provision, atk deploy can take several minutes

    • Always wait for completion before running the next step (timeout 120000ms+)

  5. Local Service Startup — Hangs terminal (expected):

    • npm run dev, npm start, python app.py, devtunnel host, etc. will hang — the process keeps running indefinitely

    • ALWAYS run as a background process (isBackground=true) — NEVER use isBackground=false for these commands

    • Do NOT wait for it to "finish" — verify startup by checking output for "listening on port" or tunnel URL

    • If errors appear, read logs, diagnose, fix, restart

    • Use a NEW terminal to launch Agents Playground or open Teams sideloading URL

  6. Monitor App Logs: Periodically check background terminal output for runtime errors. If the app crashes, read the error, fix the root cause, and restart.

  7. Telemetry Tagging: Before running any atk CLI commands, set the session environment variable so all CLI invocations are tagged as skill-initiated:

    export ATK_CLI_SKILL=true

    Run this once at the start of the session. All subsequent atk commands in the same terminal will inherit it.

ATK CLI Setup

atk --version  # Must be > 1.1.5-beta

If ATK is not found or version is too old:

npm i -g @microsoft/m365agentstoolkit-cli@beta

CLI Global Options

OptionMeaningRecommendation
-iInteractive modeAlways use -i false in automation to avoid hanging
-fProject folderDefault to be current directory, used when specifying a custom folder. When scaffolding a new project, this is the parent folder where the project folder will be created under.
-hCommand helpUse atk <command> -h for quick syntax checks

Sub-Skills

Sub-SkillWhen to UseReference
create-projectScaffold new project from template, choose template, atk newcreate-project/create-project.md
test-playgroundTest locally with Agents Playground, agentsplayground, quick testingtest-playground/test-playground.md
test-teamsRun on Teams, devtunnel, sideload, Teams testing, test in Copilottest-teams/test-teams.md
provision-deployProvision Azure resources, deploy to cloud, atk provision, atk deployprovision-deploy/provision-deploy.md
troubleshootFix errors, 401, port conflicts, YAML errors, stale botstroubleshoot/troubleshoot.md
slack-to-teamsMigrate Slack bot to Teams, cross-platform bridging, Block Kit to Adaptive Cardsslack-to-teams/SKILL.md

MANDATORY: Before executing any workflow, read the corresponding sub-skill document.

Shared References

  • manifest-and-yaml.md — Project files, YAML config, env vars, .localConfigs flow

  • commands.md — ATK CLI commands: package, validate, share, collaborate

  • templates.md — Complete template catalog with language support

  • experts/ — 100+ micro-expert files: Teams SDK, Slack SDK, cross-platform bridging, deploy, AI models, security, language conversion

  • docs/ — Platform comparison guides: UI, messaging, identity, infrastructure, feature gaps

Workflow Chains

Match user intent to the smallest valid workflow.

User IntentWorkflow (read in order)
Build new app from scratchcreate-project → test-playground
Test existing project locallytest-playground (recommended) or test-teams
Deploy to Azureprovision-deploy
Fix broken bottroubleshoot → re-test
Migrate Slack bot to Teamsslack-to-teams

MANDATORY: Before executing any slack-to-teams workflow, read slack-to-teams/SKILL.md first. The sub-skill contains a routed expert system with 100+ micro-expert files for cross-platform bot development.

ATK Project Context Resolution

Resolve config values only when missing. If a value is already known in the session, reuse it.

Step 1: Detect ATK Project

If m365agentstoolkit*.yml exists in the current folder, treat it as an ATK project and parse configuration.

Step 2: Resolve Common Configuration

Resolve variables referenced in m365agentstoolkit*.yml. Common variables: AZURE_OPENAI_API_KEY AZURE_OPENAI_ENDPOINT AZURE_OPENAI_DEPLOYMENT_NAME

Step 3: Collect Missing Values

If required values are missing, ask the user for only the missing ones.

Refer to manifest-and-yaml.md for full config-file details.

Files

docs/infrastructure.md

Infrastructure

Transport

AspectSlackTeams
Primary transportSocket Mode (WebSocket) or HTTPHTTPS only (inbound webhook)
Firewall-friendlySocket Mode — outbound WebSocket, no inbound portsRequires public HTTPS endpoint
Default endpoint/slack/events/api/messages
Local developmentSocket Mode (no tunnel needed)Dev Tunnels or ngrok required
Request verificationHMAC-SHA256 (signingSecret)Bot Framework JWT (automatic)

Rating: GREEN for HTTP-to-HTTPS, RED for Socket Mode → HTTPS (firewall environments).

Impact

Slack bots using Socket Mode run behind firewalls with zero inbound ports. Teams requires a public HTTPS endpoint — a fundamental architecture change for firewall-restricted environments.

Mitigation (Slack Socket Mode → Teams)
StrategyHowEffort
Deploy to Azure (Recommended)Host in Azure App Service / Functions / Container Apps. Use Dev Tunnels for local dev.4–8 hrs
Azure RelayHybrid connection for strict on-premises firewalls. Adds latency.8–16 hrs
Dual-Bot Transport

For bots targeting both platforms simultaneously:

PatternHow
Socket Mode + HTTP (Recommended)Slack uses WebSocket (no HTTP needed), Teams uses Express on port 3978. No port conflicts. Simplest setup.
Shared ExpressBoth use HTTP. Slack ExpressReceiver at /slack/events, Teams adapter at /api/messages. Requires careful body-parsing middleware ordering.

Compute (AWS ↔ Azure)

AWSAzureNotes
Lambda + API GatewayAzure FunctionsTeams bots need 3-second response; Functions Consumption has 5–10s cold starts
ECS / FargateContainer AppsBest for long-running bots with streaming
EC2App ServiceAlways-on, predictable latency
Cold Start Warning

Azure Functions Consumption plan has 5–10 second cold starts that violate the Teams 3-second response timeout. Mitigations:

StrategyCost Impact
App Service with Always On (Recommended)Fixed cost but no cold starts
Functions Premium with Always ReadyHigher cost, eliminates cold starts
Container Apps (min replicas ≥ 1)Moderate cost, no scale-to-zero

Storage (AWS ↔ Azure)

AWSAzureNotes
S3Blob StorageHot/Cool/Archive tiers
DynamoDBCosmos DBTable API (lowest effort) or Core SQL (richer querying)
RDS (MySQL)Azure Database for MySQLManaged migration service available
RDS (PostgreSQL)Azure Database for PostgreSQLManaged migration service available
RDS (SQL Server)Azure SQLDirect migration path
Bot State Storage
AspectSlackTeams
SDK storageNo built-in state managementIStorage interface with pluggable backends
DefaultDeveloper manages stateIn-memory (lost on restart)
ProductionExternal DB (Redis, PostgreSQL, etc.)Cosmos DB, Azure SQL, or custom IStorage

Mitigation: Implement the Teams IStorage interface with Cosmos DB for bot state. Use serverless pricing for development, provisioned RUs for production.


Secrets & Configuration

AWSAzureNotes
Secrets ManagerKey VaultSensitive credentials
SSM Parameter StoreApp ConfigurationNon-secret configuration
IAM rolesManaged IdentityZero-secret authentication
Environment variablesApp SettingsRuntime configuration
Bot Credentials
CredentialSlackTeams
Bot tokenSLACK_BOT_TOKENManaged by SDK (CLIENT_ID + CLIENT_SECRET)
Signing/verificationSLACK_SIGNING_SECRETAutomatic JWT validation
Socket ModeSLACK_APP_TOKENN/A
TenantN/ATENANT_ID
Production Secret Management
StrategyHow
Key Vault references (Recommended)@Microsoft.KeyVault(SecretUri=...) in App Settings. Zero-code secret injection. Requires managed identity.
Managed identity for bot authmanagedIdentityClientId: "system" in App constructor. Eliminates CLIENT_SECRET entirely.
DefaultAzureCredentialChains managed identity → environment → CLI → VS Code. Works everywhere.

Observability (AWS ↔ Azure)

AWSAzureNotes
CloudWatch LogsApplication Insights + Log AnalyticsKQL query language (different from CloudWatch Insights)
CloudWatch MetricsAzure Monitor MetricstrackMetric()
CloudWatch AlarmsAzure Monitor AlertsKQL-based alerting
X-RayApplication Insights distributed tracingOperation IDs, traceparent headers
Bot Health Monitoring

Key metrics to track for both platforms:

MetricWhy
Request rateVolume baseline
Response time (P50/P95/P99)Detect slowdowns before they cause timeouts
Failure rateCatch errors before users report them
Active conversationsUsage trends
AI/external API latencyDependency health
Setup
// Application Insights — must be first import
import appInsights from "applicationinsights";
appInsights.setup(process.env.APPLICATIONINSIGHTS_CONNECTION_STRING).start();

// Then import everything else
import { App } from "@microsoft/teams.apps";

Pitfall: Late instrumentation import. applicationinsights must run before http/https are loaded or distributed tracing won't work.


Rate Limiting & Resilience

AspectSlackTeams
Rate limit signalHTTP 429 + Retry-After headerHTTP 429 + Retry-After header
Built-in retryBolt retryConfig optionNo built-in retry
Conversation limits~1 msg/sec per method per token~1 msg/sec per conversation, ~30 msg/min per conversation
Graph API limitsN/ASeparate throttling (per-app per-tenant)
Invoke timeoutN/A3–10 seconds (varies by invoke type)

Rating: GREEN for basic rate limiting, YELLOW for resilience patterns.

Mitigation (Slack → Teams)

Build a RetryPlugin with exponential backoff + jitter:

ComponentPurpose
Exponential backoffWait 1s, 2s, 4s, 8s between retries
JitterAdd random delay to prevent thundering herd
Circuit breakerStop retrying after N consecutive failures
p-queueConcurrency control for proactive broadcast (avoid bursting)

Effort: 12–16 hrs for a production-grade retry plugin.

Reverse Direction (Teams → Slack)

Use Bolt's built-in retryConfig option:

const app = new App({
  token: process.env.SLACK_BOT_TOKEN!,
  signingSecret: process.env.SLACK_SIGNING_SECRET!,
  // Built-in retry with exponential backoff
});

Requirements and compatibility

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Needs: Needs an API key, Needs Python, Needs Node.js

Security

What our scanner noticed· Medium risk

  • Possible data-exfiltration endpoints
  • Instructions that use the network
  • Downloads piped into a shell

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Attribution and licence

Published by
Microsoft
Publisher
Microsoft (Official)
Source
microsoft/skills · .github/plugins/microsoft-365-agents-toolkit/skills/teams-app-developer · commit 0696600
Licence
MIT License (redistribution allowed)
  • LICENSE (added by AutoGineer from LICENSE)
  • ATTRIBUTION.md (written by AutoGineer)
Synced

AutoGineer is not affiliated with or endorsed by Microsoft.

Download ZIP

The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download teams-app-developer.zip