Microsoft Copilot security directory

OneDrive for Business

Published by Microsoft

High risk

OneDrive for Business is a cloud storage, file hosting service that allows users to sync files and later access them from a web browser or mobile device. Connect to OneDrive for Business to manage your files. You can perform various actions such as upload, update, get, and delete files.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Can permanently delete data: This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.

Available capabilities

This add-on exposes 22 tools or capabilities.

  • Convert file
  • Convert file using path
  • Copy file
  • Copy file using path
  • Create file
  • Create share link
  • Create share link [DEPRECATED]
  • Create share link by path
  • Create share link by path [DEPRECATED]
  • Delete file
  • Extract archive to folder
  • Find files in folder
  • Find files in folder by path
  • Get file content
  • Get file content using path
  • Get file metadata
  • Get file metadata using path
  • Get file thumbnail
  • List files in folder
  • List files in folder [DEPRECATED]
  • List files in root folder
  • Move or rename a file
  • Move or rename a file using path
  • Update file

The interactive security report will load automatically.