deploy-copilot-studio-bot — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited deploy-copilot-studio-bot (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
| Source Type | Configuration | Best For |
|---|---|---|
| SharePoint | Site URL + pages filter | Policy docs, HR FAQs, wikis |
| Dataverse | Table + view selection | Structured data (products, tickets) |
| Websites | URL + crawl depth | Public docs, help centers |
| Custom API | Power Automate connector | Real-time data (inventory, status) |
| Files | Upload PDFs/docs directly | Static reference material |
Best practices:
| Topic Type | Trigger | Use Case |
|---|---|---|
| System topics | Greeting, Escalation, Fallback | Built-in, customize only |
| Custom topics | Keyword/phrase triggers | Specific business workflows |
| Generative answers | No topic match → AI answers | Catch-all from knowledge |
Topic design rules:
Azure AD → App Registration → Configure:
- Client ID: {from app registration}
- Client Secret: {stored in Key Vault}
- Scope: User.Read, Sites.Read.All (minimum needed)
- Redirect URI: https://token.botframework.com/.auth/web/redirect| Channel | Configuration | Notes |
|---|---|---|
| Teams | Manifest + admin approval | Most common enterprise channel |
| Web widget | Embed script on website | Customer-facing scenarios |
| Custom app | Direct Line API | Full control over UI |
| SharePoint | Web part integration | Embedded in intranet |
| Issue | Cause | Fix |
|---|---|---|
| Bot not responding | Environment not published | Publish to target channel |
| Wrong topic triggered | Overlapping trigger phrases | Deduplicate triggers across topics |
| Knowledge returns irrelevant | Too many sources indexed | Filter to specific pages/tables |
| Auth fails in Teams | Wrong redirect URI | Use exact Bot Framework redirect |
| Power Automate timeout | Flow too complex | Simplify flow, use async pattern |
| Generative answers hallucinate | No grounding instruction | Set system prompt with "only from context" |
| Bot unavailable in Teams | Admin approval pending | Submit for admin review |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.