M365 AI Add-in Supply Chain Analysis Toolkit

Enterprise security research tooling for auditing AI-powered Office add-ins and browser extensions discovered on managed endpoints.

This repository contains original forensic tools and analysis reports. It does not contain third-party source code. Artifacts are discovered on your local machine — inside Office caches, Chrome extension directories, and macOS/Windows filesystems — then analysed with the scripts provided.

Quick Start

Requires uv (Python 3.11+).

# 1. Discover what AI add-ins are cached on this machine
uv run scripts/discover/office_addins.py
uv run scripts/discover/chrome_extensions.py
uv run scripts/discover/copilot_packages.py

# 2. Analyse a discovered manifest for permissions / CSP surface
uv run scripts/extract/permissions.py \
  "$HOME/Library/Containers/com.microsoft.Excel/.../Manifests/wa200009404_1.0.0.5"

# 3. Heuristic scan a local JS bundle for prompt fragments
uv run scripts/extract/prompts.py heuristic \
  "/path/to/local/bundle.js"

# 4. Compare two versions of the same add-in
uv run scripts/analyse/diff_versions.py \
  "/path/to/old_version" \
  "/path/to/new_version"

Repository Layout

.
├── scripts/
│   ├── discover/          # Find installed add-ins/extensions on local disk
│   ├── extract/           # Prompt, tool, symbol, and permission extractors
│   ├── analyse/           # Diff and compare local bundle versions
│   └── _lib/              # Shared fingerprinting helpers
├── fingerprints/          # File listings & hashes of observed builds (no code)
├── reports/               # Original security analysis and teardowns
└── docs/
    ├── FORENSIC_PROCEDURE.md   # Step-by-step audit workflow
    ├── OFFICE_CACHE_LAYOUT.md  # Where macOS caches add-in artifacts
    └── FRAMING_AND_LEGAL.md    # Research rationale and citation policy

Reports

Report	Subject
reports/ANALYSIS_REPORT.md	White-box teardown of ChatGPT for Excel, Claude for Office, and Claude for Chrome
reports/DEEP_DIVE.md	Functional comparison: ChatGPT vs Claude for Excel, plus Gemini Enterprise shim architecture
reports/CLAUDE_FOR_WORD_DEEP_DIVE.md	Word-specific code paths, capability surface, and provenance
reports/CLAUDE_FOR_POWERPOINT_DEEP_DIVE.md	PowerPoint manifest analysis and timeline
reports/SYSTEM_PROMPTS.md	Extractable system-prompt material from client bundles

Fingerprints

Each fingerprint JSON records the file tree, SHA-256 hashes, and manifest metadata of a specific build observed on an endpoint. Use these to verify you are analysing the same version.

• fingerprints/chatgpt-for-excel.json
• fingerprints/claude-for-excel.json
• fingerprints/claude-for-chrome.json
• fingerprints/copilot-for-excel.json
• fingerprints/claude-for-word.json
• fingerprints/claude-for-powerpoint.json

Legal & Framing

See docs/FRAMING_AND_LEGAL.md for the research rationale, local-only artifact policy, and citation guidelines.

Contributing

This is a research toolkit. If you have corrections or additional probes, open an issue or PR. All contributions must follow the local-only artifact policy: no vendor code in Git.