{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-30","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Read meeting schedules, transcripts, summaries and action items from wiserwork. Find decisions or commitments across meetings you are authorized to access. The connector cannot schedule, record or edit meetings or write to calendars and task tools.","did":"0fca7e75-898e-4822-88b2-2354a175bb6a","documentation_url":"https://www.wiserwork.ai/faqs/","editorial_description":{"extended_description":"A wiserwork account with Google Calendar or Microsoft Outlook connected is required for meeting listings. Transcripts, summaries and action items are available for sessions recorded by the wiserwork notetaker. All four tools are read-only.","schema_version":1,"summary":"Read meeting schedules, transcripts, summaries and action items from wiserwork.\nFind decisions or commitments across meetings you are authorized to access.\nThe connector cannot schedule, record or edit meetings or write to calendars and task tools."},"homepage_url":"","icon":"","id":"0fca7e75-898e-4822-88b2-2354a175bb6a","installs":0,"last_scanned":"","license":"","long_description":"A wiserwork account with Google Calendar or Microsoft Outlook connected is required for meeting listings. Transcripts, summaries and action items are available for sessions recorded by the wiserwork notetaker. All four tools are read-only.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"The complete inventory contains four read tools, and the listing expressly excludes creating, editing, deleting, scheduling, joining or recording meetings and writing to calendars or task tools.","reasoning":"The connector exposes confidential meeting knowledge but no mutation action.","risk_type":"private_data_read","severity":"low","title":"Reads meeting schedules, transcripts, summaries and action items","triggering_tools_or_skills":["get-action-items","get-summary","get-transcript","list-meetings"]},{"evidence":"Transcripts, summaries and action items derive from meeting participant speech and text.","reasoning":"Participants can introduce untrusted instructions that are later returned to the model.","risk_type":"prompt_injection_exposure","severity":"low","title":"Meeting transcripts contain participant-controlled speech","triggering_tools_or_skills":["get-transcript","get-summary","get-action-items"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required and the listing states results are limited to meetings the user participated in and is authorized to read; precise OAuth scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/0fca7e75-898e-4822-88b2-2354a175bb6a.json","what_it_proves":"Candidate PR #125 record identity (name \"wiserwork\", publisher, type web_connector) and 4 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/0fca7e75-898e-4822-88b2-2354a175bb6a: complete tool_names inventory (4 tools), remote streamable-http endpoint https://mcp.wiserwork.ai/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:00:27Z","url_or_path":"https://www.wiserwork.ai/faqs/","what_it_proves":"Official product documentation confirms that Wiserwork stores calendar-derived meeting schedules, transcripts, summaries and action items and that access is account and organization scoped."}],"primary_reason":"The complete inventory is read-only and the listing explicitly rules out all write paths.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:0fca7e75-898e-4822-88b2-2354a175bb6a","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 4 tool names. The official FAQ confirms the underlying meeting-data types but does not document the MCP tool boundary, so that boundary remains based on the Directory inventory and listing.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":4,"tools_or_skills_total":4},"name":"wiserwork","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=0fca7e75-898e-4822-88b2-2354a175bb6a&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.wiserwork.ai/privacy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"100mentors","publisher_url":"https://wiserwork.ai/","remote_url":"https://mcp.wiserwork.ai/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: The connector exposes confidential meeting knowledge but no mutation action.","evidence":"Reads meeting schedules, transcripts, summaries and action items: The complete inventory contains four read tools, and the listing expressly excludes creating, editing, deleting, scheduling, joining or recording meetings and writing to calendars or task tools.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads meeting schedules, transcripts, summaries and action items","triggering_tools":["get-action-items","get-summary","get-transcript","list-meetings"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@wiserwork.ai","tags":["accesses_calendar","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"get-action-items"},{"description":"","name":"get-summary"},{"description":"","name":"get-transcript"},{"description":"","name":"list-meetings"}],"tools_count":4,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/0fca7e75-898e-4822-88b2-2354a175bb6a","uuid":"d80e0733-a777-5f14-bbf9-c5dce7fc3dfe","verification_tier":"community","version":""},"query_key":"100mentors wiserwork","schema_version":1,"status":"match"}