Dynamics 365 Automation

The skill provides extensive capabilities for creating, updating, and retrieving sensitive data across various Dynamics 365 CRM entities (leads, accounts, contacts, opportunities, sales orders, invoices, cases). While this is the intended function of a CRM automation skill, the broad scope means that if the LLM is compromised or misused (e.g., via prompt injection), it could lead to significant unauthorized data manipulation, deletion, or exposure of sensitive customer information. Additionally, the documentation explicitly notes a 'Known Pitfall' regarding the `user_id` parameter: 'Most tools default `user_id` to "me" for the authenticated user. Override only when acting on behalf of another user.' This indicates that the skill can be instructed to perform actions on behalf of other users. If the authenticated user has the necessary permissions, this capability could be exploited for privilege escalation or impersonation within Dynamics 365, allowing an attacker to perform actions as a different user.