{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-18","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"no_auth","category":"Web Connector","confidence":"medium","description":"Generates forms and process files for Specifor Workflow from Portuguese descriptions. Create JSON forms with conditional fields and BPMN processes with stages and decisions. No login is needed to generate files; a Specifor account is required to import them manually.","did":"2d84b111-a2eb-4be2-a3ac-c23abf0e9d7c","documentation_url":"https://specifor-saas.up.railway.app/","editorial_description":{"extended_description":"The connector suggests fields and process patterns, explains product concepts and validates generated files before import. It does not access your Specifor account or deploy the workflow. Form fields can include text, numbers, currency, dates, choices, item tables and attachments.","schema_version":1,"summary":"Generates forms and process files for Specifor Workflow from Portuguese descriptions.\nCreate JSON forms with conditional fields and BPMN processes with stages and decisions.\nNo login is needed to generate files; a Specifor account is required to import them manually."},"homepage_url":"","icon":"https://specifor-saas.up.railway.app/icon.png","id":"2d84b111-a2eb-4be2-a3ac-c23abf0e9d7c","installs":0,"last_scanned":"","license":"","long_description":"The connector suggests fields and process patterns, explains product concepts and validates generated files before import. It does not access your Specifor account or deploy the workflow. Form fields can include text, numbers, currency, dates, choices, item tables and attachments.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"The packet describes a stateless public transformation service that returns generated files for the user to save and import manually.","reasoning":"It does not directly write local files, modify a Specifor account, or execute the generated artifacts.","risk_type":"third_party_data_forwarding","severity":"low","title":"Generates Specifor JSON and BPMN artifacts","triggering_tools_or_skills":["criar_formulario","criar_processo","criar_automacao","criar_condicional"]}],"assessment_status":"provisional","auth_and_scopes":"No authentication is required. The packet says the server only transforms supplied descriptions and does not access a Specifor account or retain conversation content.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/2d84b111-a2eb-4be2-a3ac-c23abf0e9d7c.json","what_it_proves":"Candidate PR #125 record identity (name \"specifor-saas\", publisher, type web_connector) and 12 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/2d84b111-a2eb-4be2-a3ac-c23abf0e9d7c: complete tool_names inventory (12 tools), remote streamable-http endpoint https://specifor-saas.up.railway.app/mcp, auth_posture no_auth, directory tier community"}],"primary_reason":"specifor-saas is an unauthenticated generator/validator that returns artifacts without modifying an account or filesystem.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:2d84b111-a2eb-4be2-a3ac-c23abf0e9d7c","reviewed_at":"2026-10-10","reviewer_notes":"The documentation URL was inaccessible during review. Runtime verification should confirm the claimed no-retention behavior and absence of hidden account actions.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"false","prompt_injection_exposure":"false","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":12,"tools_or_skills_total":12},"name":"specifor-saas","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=2d84b111-a2eb-4be2-a3ac-c23abf0e9d7c&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://specifor-saas.up.railway.app/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"4Asset Technologies","publisher_url":"https://www.4asset.com.br/","remote_url":"https://specifor-saas.up.railway.app/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: It does not directly write local files, modify a Specifor account, or execute the generated artifacts.","evidence":"Generates Specifor JSON and BPMN artifacts: The packet describes a stateless public transformation service that returns generated files for the user to save and import manually.","manual_risk_type":"third_party_data_forwarding","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Generates Specifor JSON and BPMN artifacts","triggering_tools":["criar_formulario","criar_processo","criar_automacao","criar_condicional"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"ci-suporte@4asset.net.br","tags":["forwards_data_to_third_party","network_access","web_connector"],"tools":[{"description":"","name":"consultar_schema"},{"description":"","name":"criar_automacao"},{"description":"","name":"criar_condicional"},{"description":"","name":"criar_formulario"},{"description":"","name":"criar_processo"},{"description":"","name":"enriquecer_formulario"},{"description":"","name":"explicar_conceito"},{"description":"","name":"sugerir_arquetipo"},{"description":"","name":"sugerir_campos"},{"description":"","name":"validar_automacao"},{"description":"","name":"validar_formulario"},{"description":"","name":"validar_processo"}],"tools_count":12,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/2d84b111-a2eb-4be2-a3ac-c23abf0e9d7c","uuid":"6f0951f1-eb34-5931-96c2-f3edd9e16cbf","verification_tier":"community","version":""},"query_key":"4asset technologies specifor saas","schema_version":1,"status":"match"}