Microsoft Copilot security directory

Zoho TeamInbox

Published by Zoho Corporation Private Limited

Medium risk

The Zoho TeamInbox connector allows you to perform actions such as creating and saving contacts, as well as receiving, searching, archiving, and deleting emails within your shared inboxes based on email ID, sender address, subject line, or email content.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Can send messages as you: This connector can post messages, emails, or notifications on your behalf. Recipients will believe the message came from you, which makes phishing or social-engineering risks higher.
  • Sends your data to outside companies: Anything you share with this connector flows to a third-party service. That company sees, stores, and may use the data according to their own policies.

Available capabilities

This add-on exposes 7 tools or capabilities.

  • Archive a thread
  • Assign a thread
  • Create contact
  • Follow a Thread
  • Search email
  • Send email
  • Trash a thread

The interactive security report will load automatically.