Copilot Studio
10 checks from Mito: 4 High, 5 Medium, 1 Low.
| ID | Title | Severity | Suite |
|---|---|---|---|
| MT.1113 | AI agents should not be shared with broad access control policies. | High | Mito |
| MT.1114 | AI agents should require user authentication. | High | Mito |
| MT.1115 | AI agents should not have risky HTTP configurations. | Medium | Mito |
| MT.1116 | AI agents should not send email with AI-controlled inputs. | High | Mito |
| MT.1117 | Published AI agents should not be dormant. | Low | Mito |
| MT.1118 | AI agents should not use author (maker) authentication for connections. | Medium | Mito |
| MT.1119 | AI agents should not have hard-coded credentials in topics. | High | Mito |
| MT.1120 | AI agents should not use MCP server tools without review. | Medium | Mito |
| MT.1121 | AI agents with generative orchestration should have custom instructions. | Medium | Mito |
| MT.1122 | AI agents should not have orphaned ownership. | Medium | Mito |
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.