GPT plugins in Microsoft Security Copilot

Important

The information in this article only applies to the Microsoft Security Copilot Early Access Program, an invite-only paid preview program for commercial customers. Some information in this article relates to a prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.

GPT skill settings

Setting Name Type Description Required
ModelName string Selects which GPT model to use. Must be one of the available model names. yes
Template string GPT prompt template. yes
TemplateUrl string Selects which GPT model to use. Must be one of the available model names. yes
TemplatePackage string Selects which GPT model to use. Must be one of the available model names. yes
TemplateFile string Selects which GPT model to use. Must be one of the available model names. yes

Available model names

Model Name Model Family Max Tokens
gpt-4-32k-v0613 GPT 4 32k

GPT plugin manifest

Descriptor:
  Name: SampleGPT
  DisplayName: My Sample GPT Skillset
  Description: Skills for defanging URLs

SkillGroups:
  - Format: GPT
    Skills:
      - Name: DefangUrls
        DisplayName: Defang URLs
        Description: Defangs URLs in the given text
        Inputs:
          - Name: text
            Description: The text containing URLs to be defanged
        Settings:
          ModelName: gpt-4-32k-v0613
          Template: |-
            To 'defang' a URL means to change the scheme to either hxxp or hxxps and replace '.' with '[.]' in the domain so that the URL is still easily readable by a human but doesn't automatically render as a hyperlink if rendered in a rich client such as Outlook. This is often done when sharing potentially malicious links to prevent the reader accidentally clicking on them and visiting a malicious website.

            Some examples of defanging URLs:
            1. https://example.com --> hxxps://example[.]com
            2. http://subdomain.example.com/path.with.dots/ --> hxxp://subdomain[.]example[.]com/path.with.dots/

            Defang any URLs in the following text and return the new text:
            {{text}}

Tip

For production plugins the preferred implementation is to put the GPT template in a separate file and point to it using the TemplateUrl or PackageUrl setting.

TemplateURL

Descriptor:
  Name: SampleGPTTemplate
  DisplayName: My Sample GPT Skillset With Template
  Description: Skills for defanging URLs

SkillGroups:
  - Format: GPT
    Skills:
      - Name: DefangUrls
        DisplayName: Defang URLs
        Description: Defangs URLs in the given text
        Inputs:
          - Name: text
            Description: The text containing URLs to be defanged
        Settings:
          ModelName: gpt-4-32k-v0613
          TemplateUrl: https://[domain]/template.txt

PackageUrl

Descriptor:
  Name: SampleGPTTemplateWithPackageUrl
  DisplayName: My Sample GPT Skillset With PackageUrl
  Description: Skills for defanging URLs

SkillGroups:
  - Format: GPT
    Settings:
        PackageUrl: https://[domain]/GPTTemplates.zip
    Skills:
      - Name: DefangUrls
        DisplayName: Defang URLs
        Description: Defangs URLs in the given text
        Inputs:
          - Name: text
            Description: The text containing URLs to be defanged
        Settings:
          ModelName: gpt-4-32k-v0613
          TemplateFile: GPTTemplates/SampleGPTTemplate.txt