Microsoft Copilot security directory

Box

Published by Microsoft

High risk

Box™ is a service that keeps your files safe, synced, and easy to share. Connect to Box to manage your files. You can perform various actions such as upload, update, get, and delete files in Box.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Can permanently delete data: This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.
  • Sends your data to outside companies: Anything you share with this connector flows to a third-party service. That company sees, stores, and may use the data according to their own policies.

Available capabilities

This add-on exposes 11 tools or capabilities.

  • Copy file
  • Create file
  • Delete file
  • Extract archive to folder
  • Get file content using id
  • Get file content using path
  • Get file metadata using id
  • Get file metadata using path
  • List files and folders in folder
  • List files and folders in root folder
  • Update file

The interactive security report will load automatically.