CopilotStudioHealthMonitor 1.2.1

.NET Framework 4.5.2

dotnet add package CopilotStudioHealthMonitor --version 1.2.1

NuGet\Install-Package CopilotStudioHealthMonitor -Version 1.2.1

This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package.

<PackageReference Include="CopilotStudioHealthMonitor" Version="1.2.1" />

For projects that support PackageReference, copy this XML node into the project file to reference the package.

<PackageVersion Include="CopilotStudioHealthMonitor" Version="1.2.1" />
                    

                            Directory.Packages.props

<PackageReference Include="CopilotStudioHealthMonitor" />
                    

                            Project file

For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package.

paket add CopilotStudioHealthMonitor --version 1.2.1

The NuGet Team does not provide support for this client. Please contact its maintainers for support.

#r "nuget: CopilotStudioHealthMonitor, 1.2.1"

#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package.

#:package CopilotStudioHealthMonitor@1.2.1

#:package directive can be used in C# file-based apps starting in .NET 10 preview 4. Copy this into a .cs file before any lines of code to reference the package.

#addin nuget:?package=CopilotStudioHealthMonitor&version=1.2.1
                    

                            Install as a Cake Addin

#tool nuget:?package=CopilotStudioHealthMonitor&version=1.2.1
                    

                            Install as a Cake Tool

The NuGet Team does not provide support for this client. Please contact its maintainers for support.

Copilot Studio Agent Health Monitor

An XrmToolBox plugin to audit, secure, govern, and validate Microsoft Copilot Studio agents across Power Platform environments. Fully read-only against Dataverse — it never writes to your environment.

Features

Tab	What you get
Dashboard	KPI cards (total agents, critical count, no-auth count, orphaned owners, dormant / orphaned) + risk-ranked agent table with colour-coded health, jump buttons to every tab (including 📈 Adoption), and a 📄 Export Governance Report button
Agent Inventory	Full agent list with filter/search, owner info, authentication mode, solution membership, creation dates, and expandable component details
Security Scanner	Automated 0–100 security score for every agent, aligned to Microsoft's official "Top 10 Copilot Studio agent security risks" (Feb 2026) — checks for no authentication, insecure `http://` & HTTP-action endpoints, email-based data exfiltration, maker/author authentication, MCP / custom tools, hardcoded secrets & credentials (regex scan with redacted previews), disabled owners, and solution membership. Every finding is tagged with its Top-10 risk number, and the header shows a clean / critical summary with per-issue remediation steps
Sharing & Access	Audits who each agent is shared with (users & teams) and at what access level, surfacing over-shared and broadly-exposed agents
Knowledge Sources	Inventories the knowledge sources (websites, files, Dataverse, SharePoint) wired into each agent and flags public-web grounding and inactive sources
Adoption & Lifecycle	Flags dormant and orphaned agents (agent sprawl) using owner status + last-edited age, and — when the conversation-transcript table is retained — real usage (last-used date + 30/90-day conversation counts), with a staleness label per agent
Deployment Readiness	4 pre-deployment checks for a selected agent — optionally verified against a connected target environment (UAT/PROD)
ALM Diff	Side-by-side bot component comparison across two environments: Match / Content Differs / Missing in Target / Only in Target
ALM & Dependencies	Per-agent solution membership (managed/unmanaged, Default-only orphans) and a forward dependency map — connection references, environment variables, cloud flows, knowledge targets, MCP tools — with ALM transport risk flags (ALM-01…08) for dependencies that are unpackaged, unconfigured, or won't repoint across environments
Governance Report	One-click, self-contained HTML governance report (KPI summary + Microsoft Top-10 scorecard + per-section tables for security, sharing, knowledge, and adoption) to hand to security / leadership

Quick Start

Install via the XrmToolBox Tool Library → search "Copilot Studio Agent Health Monitor"
Connect XrmToolBox to your Dataverse environment
Open the plugin — agents load automatically
Use the Dashboard for an instant health overview, or drill into individual tabs

See the full User Guide for detailed instructions on every feature.

Installation

Via XrmToolBox Tool Library (recommended)

Open XrmToolBox
Click Tool Library
Search for Copilot Studio Agent Health Monitor
Click Install → restart XrmToolBox

Manual (DLL drop)

Download CopilotStudioHealthMonitor.dll from Releases
Copy to %APPDATA%\MscrmTools\XrmToolBox\Plugins\
Restart XrmToolBox

Security Checks

Check ID	MS Top-10	Description	Score Impact
SEC-01	#2	No Authentication configured	−30
SEC-03	#3	HTTP Request / OpenApiConnection actions, incl. insecure `http://`	−10 (−15 if insecure)
SEC-04	#4	Email-sending action — data exfiltration risk	−15
SEC-05	#10	Agent owner account is disabled	−20
SEC-06	#6	Tool/connection uses maker (author) authentication	−10
SEC-07	—	Agent not included in any Dataverse solution (ALM hygiene)	−5
SEC-08	#8	MCP / custom tools configured	−10
SEC-10	#7	Possible hardcoded secret / credential (regex scan, redacted preview)	−25

Score ≥ 85 = 🟢 Healthy · Score 60–84 = 🟡 Needs Attention · Score < 60 = 🔴 Critical

Checks are aligned to Microsoft's official "Top 10 Copilot Studio agent security risks" (Feb 2026); each finding is tagged with its Top-10 risk number. Risk #1 (oversharing) is covered by the Sharing & Access tab, #5 (dormant agents) by the Adoption & Lifecycle tab, and #9 (generative orchestration without instructions) is not yet checked.

Deployment Checks

Check ID	Description	Org
DEP-01	Agent belongs to a Dataverse solution	Source
DEP-02	Authentication is configured (not No Auth)	Source
DEP-03	All environment variables have values	Target (if connected)
DEP-04	All connection references are mapped	Target (if connected)

Requirements

XrmToolBox 1.2024.9.69 or later
.NET Framework 4.7.2
Windows 10 / Windows Server 2016 or later
Dataverse online environment with Copilot Studio enabled
System Administrator or System Customizer role

Building from Source

# Clone and build
git clone https://github.com/manmohanbca-spec/CopilotStudioHealthMonitor.git
cd CopilotStudioHealthMonitor

# Build Release
& "D:\VS\MSBuild\Current\Bin\MSBuild.exe" `
    "CopilotStudioHealthMonitor\CopilotStudioHealthMonitor.csproj" `
    /p:Configuration=Release /t:Rebuild /nologo

# Deploy to XrmToolBox
Copy-Item "CopilotStudioHealthMonitor\bin\Release\CopilotStudioHealthMonitor.dll" `
    "$env:APPDATA\MscrmTools\XrmToolBox\Plugins\" -Force

Known Limitations

Read-only — never writes to your environment
Requires Dataverse online (Copilot Studio is cloud-only)
DEP-03 may report false positives for env vars that have a default value but no explicit value record
Component content is truncated to 200 characters in the Inventory view (full content used for ALM Diff)

Contributing

Pull requests are welcome. Please open an issue first for significant changes.

Fork the repository
Create a feature branch (git checkout -b feature/my-feature)
Run the test suite: dotnet test CopilotStudioHealthMonitor.Tests\
Submit a PR

License

MIT — see LICENSE

Product	Compatible and additional computed target framework versions.
.NET Framework	net452 is compatible. net46 was computed. net461 was computed. net462 was computed. net463 was computed. net47 was computed. net471 was computed. net472 was computed. net48 was computed. net481 was computed.

Compatible target framework(s)

Included target framework(s) (in package)

Learn more about Target Frameworks and .NET Standard.

- XrmToolBox (>= 1.2023.10.67)

NuGet packages

This package is not used by any NuGet packages.

GitHub repositories

This package is not used by any popular GitHub repositories.

Version	Downloads	Last Updated
1.2.1	152	6/16/2026

1.2.1 - Packaging only (no functional change from 1.2.0): the package now bundles the project README so the nuget.org package page shows the full overview, and README cross-links were made absolute. Re-published as 1.2.1 because nuget.org package versions are immutable.
1.2.0 - New "ALM & Dependencies" tab. Maps each agent's solution membership (managed/unmanaged, Default-only orphans) and forward dependency graph using the Dataverse RetrieveRequiredComponents API plus content analysis: connection references, environment variables, cloud flows, knowledge-source targets, and MCP/custom tools. Flags ALM transport risks ALM-01 through ALM-08 (not in a solution, orphaned in Default, dependencies not packaged with the agent, unconfigured connection references, environment variables without values, cloud flow not co-packaged, external grounding targets, managed-only). Adds a "Not ALM-deployable" KPI and an ALM section to the Governance Report. Read-only.
1.1.0 - Major feature release. New tabs: Sharing & Access audit, Knowledge Sources inventory, and Adoption & Lifecycle (dormant/orphaned-agent analytics). Security Scanner expanded to Microsoft's Top 10 Copilot Studio agent security risks: added SEC-04 (email exfiltration), SEC-06 (maker authentication), SEC-08 (MCP/custom tools), SEC-10 (hardcoded secrets), and hardened SEC-03 (insecure HTTP). New one-click Governance Report (HTML) export from the Dashboard, plus a Dormant/Orphaned KPI card.
1.0.8 - Use real XrmToolBox dependency version 1.2023.10.67 (1.2024.9.69 didn't exist on nuget.org which caused xrmtoolbox.com validator to reject as "version dependency missing")
1.0.7 - Wrap XrmToolBox dependency in <group targetFramework="any"> with range version
1.0.6 - Switched to iconUrl and removed NuGet 5+ features (icon/license/readme elements) to fix xrmtoolbox.com validator dependency format
1.0.5 - Updated nuspec to 2013 schema; DLL target net472
1.0.4 - Fixed DLL target path to lib\net452\Plugins
1.0.3 - Fixed NuGet dependency ID to XrmToolBox
1.0.2 - Flattened NuGet dependency format
1.0.1 - Added 128x128 icon; fixed license expression and readme in package
1.0.0 - Initial release: Dashboard, Agent Inventory, Security Scanner, Deployment Readiness, ALM Diff