Microsoft Copilot security directory

Cloud BOT

Published by C-RISE Ltd.

High risk

Cloud BOT is a freemium service for web browser automation. You can easily create your own robot with no code and no installation required. Since the robot is located in the cloud, it can be run at any time. As part of the flow, you can run a robot that automates browser operations. You can pass the data/files to the robot and input it on the web, or receive the data/files acquired from the web and continue the flow.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can execute code or queries: This connector can run arbitrary queries or code against a database or execution engine. An AI-generated query could be manipulated to exfiltrate, corrupt, or destroy data.
  • Sends your data to outside companies: Anything you share with this connector flows to a third-party service. That company sees, stores, and may use the data according to their own policies.

Available capabilities

This add-on exposes 3 tools or capabilities.

  • Download File
  • Execute BOT
  • Upload File

The interactive security report will load automatically.