Skip to content
badbots.news
Misbehavior1 sourceFirst seen
Picture from the promptarmor.com article
Image: promptarmor.com

Admins Said No to DeepSeek. Copilot Cowork's Skills Said 'Hold My Access Path.'

Ourtake

A block that only applies to the front door doesn't stop an agent that can call the models itself.

What happened

Security firm PromptArmor found that Skills in Microsoft Copilot Cowork could call DeepSeek and Mistral models that organizations had blocked, without the user needing an API key. Skills could also set a custom system prompt that bypassed Copilot's guardrails. As of June 25, Microsoft had removed the DeepSeek admin setting, and the only remaining way for admins to block the access was to disable Copilot Cowork entirely.

Source