Microsoft Copilot security directory

WorkPoint

Published by WorkPoint

High risk

WorkPoint 365 business-solution makes it easy to manage critical processes.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Can execute code or queries: This connector can run arbitrary queries or code against a database or execution engine. An AI-generated query could be manipulated to exfiltrate, corrupt, or destroy data.
  • Sends your data to outside companies: Anything you share with this connector flows to a third-party service. That company sees, stores, and may use the data according to their own policies.

Available capabilities

This add-on exposes 24 tools or capabilities.

  • Adds a document to a digital signature transaction
  • Changes the stage for an entity
  • Changes the stage for an entity and set field values
  • Completes a digital signature transaction (base64)
  • Completes digital signature transaction (byte array)
  • Converts a document to pdf and saves it to a list
  • Copies a business module entity in WorkPoint
  • Create business module entity in WorkPoint
  • Creates a log entry for a digital signature transaction
  • Creates a Word document based on a template and returns the document
  • Creates a Word document based on a template and returns the document as html
  • Declares a document as record
  • Executes an action on a business module entity
  • Generates a xwsse header to use for digital signature
  • Gets a log entry from the digital signature log
  • Gets a parameter for App or flow integration
  • Gets all active actions on a business module
  • Gets all active triggers on a business module
  • Gets all business modules
  • Gets DateTimeOffset.UtcNow converted to Unix time milliseconds
  • Moves an entity
  • Register a site collection to be used by WorkPoint for multi site collection
  • Undeclares a document as record
  • Update business module entity in WorkPoint

The interactive security report will load automatically.