Microsoft Copilot security directory

Priority Matrix

Published by Appfluence Inc

Medium risk

Visualize priorities and help your team focus on high-impact work, without leaving Teams.

Security assessment

Plutonium assessed this plugin for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can send messages as you: This connector can post messages, emails, or chat replies on your behalf. Recipients will believe the message came from you, which makes phishing or social-engineering risks higher.
  • Stores long-lived access tokens: This connector requires API access tokens. If those tokens leak or are stolen, whoever holds them gets the same access you have to the connected service.

Available capabilities

This add-on exposes 11 tools or capabilities.

  • Calendars.Read
  • Files.Read.All
  • Mail.Read
  • Tasks.Read
  • TeamsActivity.Send
  • User.Read
  • User.ReadBasic.All
  • email
  • offline_access
  • openid
  • profile

The interactive security report will load automatically.