Microsoft Copilot security directory

COSMO Bot

Published by COSMO CONSULT GmbH

High risk

COSMO Bot increases your business success through more efficiency in everyday life. If you answer a standard question today, you are wasting time. In contact with your customers, this is often a good opportunity to get to know each other and establish a relationship. But internally, from employee to employee, or when there is simply too much to do, it is a luxury that not everyone can allow themselves. This connector allows you to extend the bot's functionality and integrate other systems.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Can permanently delete data: This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.
  • Can execute code or queries: This connector can run arbitrary queries or code against a database or execution engine. An AI-generated query could be manipulated to exfiltrate, corrupt, or destroy data.
  • Sends your data to outside companies: Anything you share with this connector flows to a third-party service. That company sees, stores, and may use the data according to their own policies.

Available capabilities

This add-on exposes 20 tools or capabilities.

  • Add a new question-answer set
  • Add a new topic
  • Add an expert to a topic
  • Ask COSMO Bot a question
  • Close a ticket
  • Convert COSMO Bot Script
  • Create a shadow copy of a question-answer set
  • Delete a question-answer set
  • Edit an existing question-answer set
  • Get all question-answer sets
  • Get all topics
  • Get experts for a topic
  • Get global settings
  • Get open tickets
  • Get topic
  • Open a ticket (feedback)
  • Open a ticket (question)
  • Remove an expert from a topic
  • Rename an existing topic
  • Translate (markdown friendly)

The interactive security report will load automatically.