Microsoft Copilot security directory

PUG Gamified Engagement

Published by Pug Interactive Inc

High risk

The PUG Gamified Engagement Connector for Dynamics 365 enables the first phase of a comprehensive and personalized gamified engagement program for driving customer loyalty. This app comes with out-of-the-box integration into D365 and enables D365 platform customers to create users within a loyalty framework, generate badges based on digital actions, and issue currency for answering calls to action.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Can permanently delete data: This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.
  • Sends your data to outside companies: Anything you share with this connector flows to a third-party service. That company sees, stores, and may use the data according to their own policies.

Available capabilities

This add-on exposes 13 tools or capabilities.

  • Add Item Instance
  • Add Points
  • Claim Instance
  • Create Player
  • Get account balance
  • Get Badge
  • Get Badge Instance
  • Get Batch
  • Get Player Badges Instances
  • Get players Accounts
  • Issue Badge
  • List Badges
  • Remove Points

The interactive security report will load automatically.