Microsoft Copilot Cowork Exfiltrates Files | Hacker News

A Hacker News discussion says Microsoft Copilot Cowork can automatically load user-created skills from a user’s OneDrive, including simple text files.

That behavior raises concerns that sensitive files could be exposed or exfiltrated through the Skills feature.

Commenters said administrators may have too little visibility and control over what users can place in OneDrive.

The debate highlights enterprise governance and security risks as Microsoft expands Copilot Cowork.