{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-30","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"reviewed","auth_posture":"no_auth","category":"Web Connector","confidence":"high","description":"Run an AI-search visibility report with AEO Engine. Provide a website and email to review visibility, competitor gaps and suggested fixes. Receive a structured summary, shareable report link and emailed report when processing finishes.","did":"109e20d1-a7d7-422e-aa10-7bd4ca1ecf5b","documentation_url":"https://aeoengine.ai/.well-known/aeo-report-openapi.json","editorial_description":{"extended_description":"The service analyzes visibility in ChatGPT, Perplexity, Gemini and Claude. One tool starts the report and another checks progress. No account is required, but requests require an email and are rate-limited.","schema_version":1,"summary":"Run an AI-search visibility report with AEO Engine.\nProvide a website and email to review visibility, competitor gaps and suggested fixes.\nReceive a structured summary, shareable report link and emailed report when processing finishes."},"homepage_url":"","icon":"","id":"109e20d1-a7d7-422e-aa10-7bd4ca1ecf5b","installs":0,"last_scanned":"","license":"","long_description":"The service analyzes visibility in ChatGPT, Perplexity, Gemini and Claude. One tool starts the report and another checks progress. No account is required, but requests require an email and are rate-limited.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The official request schema requires a caller-supplied real email and states that the finished report is emailed there.","reasoning":"The unauthenticated tool can cause external email delivery to a supplied recipient.","risk_type":"messaging_as_user","severity":"high","title":"Emails a generated report to a supplied address","triggering_tools_or_skills":["run_aeo_report"]},{"evidence":"Official documentation says the call queues a report and returns a job ID, status URL and public shareable report URL.","reasoning":"It creates durable third-party job and report state.","risk_type":"data_modification","severity":"medium","title":"Creates a persistent report job and shareable result","triggering_tools_or_skills":["run_aeo_report"]},{"evidence":"The schema accepts a registrable domain or full URL for the target to audit.","reasoning":"A user controls the remote website processed by the service.","risk_type":"arbitrary_network_access","severity":"low","title":"Audits a caller-selected website domain","triggering_tools_or_skills":["run_aeo_report"]},{"evidence":"The report evaluates content and AI visibility of an arbitrary target website.","reasoning":"Website text is third-party input that can influence the generated report.","risk_type":"prompt_injection_exposure","severity":"low","title":"Target websites provide untrusted content","triggering_tools_or_skills":["run_aeo_report","get_aeo_report_status"]},{"evidence":"The schema requires email ownership neither through authentication nor OTP, only MX validation, while sending the result to that address.","reasoning":"Rate limiting does not establish recipient authorization.","risk_type":"authz_ambiguity","severity":"low","title":"No-auth endpoint accepts arbitrary validated recipient email","triggering_tools_or_skills":["run_aeo_report"]}],"assessment_status":"reviewed","auth_and_scopes":"No API key is required; a real MX-validated email is accepted for delivery, with per-IP, per-email and per-domain rate limits.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"high","evidence_completeness":"complete","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/109e20d1-a7d7-422e-aa10-7bd4ca1ecf5b.json","what_it_proves":"Candidate PR #125 record identity (name \"aeoengine.ai\", publisher, type web_connector) and 2 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/109e20d1-a7d7-422e-aa10-7bd4ca1ecf5b: complete tool_names inventory (2 tools), remote streamable-http endpoint https://aeoengine.ai/mcp, auth_posture no_auth, directory tier community"},{"accessed_at":"2026-10-10T21:00:27Z","url_or_path":"https://aeoengine.ai/.well-known/aeo-report-openapi.json","what_it_proves":"The official OpenAPI schema confirms that run_aeo_report starts a report for a supplied domain and real email, emails the completed report, returns a public share URL, and requires no API key."}],"primary_reason":"The official schema confirms that an unauthenticated call queues a report and sends it to a caller-supplied email address.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":false,"review_key":"claude:109e20d1-a7d7-422e-aa10-7bd4ca1ecf5b","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed both tools against the official OpenAPI schema; the service is free and rate-limited, so no financial action is evidenced.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"false","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":2,"tools_or_skills_total":2},"name":"aeoengine.ai","needs_runtime_verification":false,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=109e20d1-a7d7-422e-aa10-7bd4ca1ecf5b&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://aeoengine.ai/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"AEO Engine","publisher_url":"https://aeoengine.ai/","remote_url":"https://aeoengine.ai/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: The unauthenticated tool can cause external email delivery to a supplied recipient.","evidence":"Emails a generated report to a supplied address: The official request schema requires a caller-supplied real email and states that the finished report is emailed there.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Emails a generated report to a supplied address","triggering_tools":["run_aeo_report"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It creates durable third-party job and report state.","evidence":"Creates a persistent report job and shareable result: Official documentation says the call queues a report and returns a job ID, status URL and public shareable report URL.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates a persistent report job and shareable result","triggering_tools":["run_aeo_report"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: A user controls the remote website processed by the service.","evidence":"Audits a caller-selected website domain: The schema accepts a registrable domain or full URL for the target to audit.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Audits a caller-selected website domain","triggering_tools":["run_aeo_report"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"team@aeoengine.ai","tags":["forwards_data_to_third_party","modifies_data","network_access","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"get_aeo_report_status"},{"description":"","name":"run_aeo_report","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: The unauthenticated tool can cause external email delivery to a supplied recipient."}}],"tools_count":2,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/109e20d1-a7d7-422e-aa10-7bd4ca1ecf5b","uuid":"31cf2723-fd2e-5e5c-9885-3c3abbd771de","verification_tier":"community","version":""},"query_key":"aeo engine aeoengine ai","schema_version":1,"status":"match"}