Microsoft Copilot security directory

ConvertKit (Independent Publisher)

Published by Troy Taylor, Hitachi Solutions

High risk

ConvertKit is the go-to marketing hub for creators that helps you grow and monetize your audience with ease. Convert your followers from social media, YouTube, and more to your email list with a beautiful landing page and opt-in templates.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Can permanently delete data: This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.
  • Can spend money on your behalf: This connector can initiate charges, orders, or subscriptions. An AI executing these actions could trigger unauthorized financial transactions.
  • Sends your data to outside companies: Anything you share with this connector flows to a third-party service. That company sees, stores, and may use the data according to their own policies.

Available capabilities

This add-on exposes 27 tools or capabilities.

  • Add subscriber to a form
  • Add subscriber to a sequence
  • Create a broadcast
  • Create a purchase
  • Create a tag
  • Destroy a broadcast
  • Get a purchase
  • Get a subscriber
  • Get account
  • Get broadcast stats
  • Get forms
  • List broadcasts
  • List purchases
  • List sequences
  • List subscriber's tags
  • List subscribers
  • List subscriptions to a form
  • List subscriptions to a sequence
  • List subscriptions to a tag
  • List tags
  • Remove tag from subscriber
  • Remove tag from subscriber by email
  • Retrieve a broadcast
  • Tag a subscriber

The interactive security report will load automatically.