Sweep risky shares
Export a Drive / OneDrive / sharing report to CSV locally. No OAuth in this MVP — upload, map columns, get a prioritized fix list.
Heuristics: “anyone / public / link” patterns, edit hints, sensitive filenames, missing expiry when mapped.