OpenAI Codex security directory

Outlook Calendar

Published by OpenAI

High risk

Brings Outlook scheduling workflows into Codex. Summarize your day, compare availability and prepare for meetings. Schedule, reschedule or cancel events through the connected Outlook app.

Security assessment

Plutonium assessed this plugin for permissions, capabilities, and security-relevant behavior.

  • Calendar app can cancel events: Can delete records, files, projects, messages, or resources that may be difficult to recover.
  • App schedules and reschedules calendar events: Can create or change persistent records, files, projects, permissions, settings, or credentials.
  • App reads calendars, availability and meeting details: Can read private account, workspace, repository, message, analytics, or file data.
  • Hosted app retains Microsoft authorization: Uses credentials, OAuth grants, API keys, or tokens that may remain valid after the current session.
  • Cancel and reschedule operations notify meeting attendees: Can send messages, comments, invitations, posts, or published content attributed to the connected user.

The interactive security report will load automatically.