Note

Access to this page requires authorization. You can try signing in or .

Access to this page requires authorization. You can try .

Add a GPT tool to your agent

Important

Some information in this article relates to a prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.

In this example, you're guided in creating a GPT tool (skill) for your agent that defangs a URL.

Create and upload a GPT tool to Security Copilot

The GPT tool is defined as follows:

Descriptor:
 Name: DCA_SampleGPT
 DisplayName: DCA_My Sample GPT Skillset
 Description: Skills for defanging URLs

SkillGroups:
 - Format: GPT
 Skills:
 - Name: DefangUrls
 DisplayName: Defang URLs
 Description: Defangs URLs in the given text
 Inputs:
 - Name: text
 Description: The text containing URLs to be defanged
 Settings:
 ModelName: gpt-4.1
 Template: |-
 To 'defang' a URL means to change the scheme to either hxxp or hxxps and replace '.' with '[.]' in the domain so that the URL is still easily readable by a human but doesn't automatically render as a hyperlink if rendered in a rich client such as Outlook. This is often done when sharing potentially malicious links to prevent the reader accidentally clicking on them and visiting a malicious website.

 Some examples of defanging URLs:
 1. https://example.com --> hxxps://example[.]com
 2. http://subdomain.example.com/path.with.dots/ --> hxxp://subdomain[.]example[.]com/path.with.dots/

 Defang any URLs in the following text and return the new text:
 {{text}}

For instructions on how to upload and enable the plugin, see Build agent manifest.

The end results after the plugin is run:

👁 Image of the GPT tool results in Security Copilot


Feedback

Was this page helpful?

Additional resources