In this example, you're guided in creating a GPT tool (skill) for your agent that defangs a URL.

Create and upload a GPT tool to Security Copilot

The GPT tool is defined as follows:

Descriptor:  Name: DCA_SampleGPT  DisplayName: DCA_My Sample GPT Skillset  Description: Skills for defanging URLsSkillGroups:  - Format: GPT    Skills:      - Name: DefangUrls        DisplayName: Defang URLs        Description: Defangs URLs in the given text        Inputs:          - Name: text            Description: The text containing URLs to be defanged        Settings:          ModelName: gpt-4.1          Template: |-            To 'defang' a URL means to change the scheme to either hxxp or hxxps and replace '.' with '[.]' in the domain so that the URL is still easily readable by a human but doesn't automatically render as a hyperlink if rendered in a rich client such as Outlook. This is often done when sharing potentially malicious links to prevent the reader accidentally clicking on them and visiting a malicious website.            Some examples of defanging URLs:            1. https://example.com --> hxxps://example[.]com            2. http://subdomain.example.com/path.with.dots/ --> hxxp://subdomain[.]example[.]com/path.with.dots/            Defang any URLs in the following text and return the new text:            {{text}}

For instructions on how to upload and enable the plugin, seeBuild agent manifest.

The end results after the plugin is run: