{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-04","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"AI Business Transformation Simulator proposes ideas by audience, offering, and delivery. Generate five ideas with estimated success probabilities and supporting analyses, all in Japanese. New analyses consume your plan allowance and run only after you agree.","did":"9af5b081-24aa-4dac-a506-f3029b5d9d36","documentation_url":"https://strategy.feelflow.net/docs/mcp","editorial_description":{"extended_description":"Review the proposed analysis and allowance cost before execution. Read your own past results, SWOT analyses, personas, competitor analysis, customer journeys, and action plans. Viewing history and checking usage do not consume the analysis allowance.","schema_version":1,"summary":"AI Business Transformation Simulator proposes ideas by audience, offering, and delivery.\nGenerate five ideas with estimated success probabilities and supporting analyses, all in Japanese.\nNew analyses consume your plan allowance and run only after you agree."},"homepage_url":"","icon":"","id":"9af5b081-24aa-4dac-a506-f3029b5d9d36","installs":0,"last_scanned":"","license":"","long_description":"Review the proposed analysis and allowance cost before execution. Read your own past results, SWOT analyses, personas, competitor analysis, customer journeys, and action plans. Viewing history and checking usage do not consume the analysis allowance.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The listing explicitly says only a new analysis consumes plan usage and shows the amount before confirmation.","reasoning":"It spends limited subscription quota.","risk_type":"financial_transaction","severity":"high","title":"Consumes analysis allowance","triggering_tools_or_skills":["run_analysis"]},{"evidence":"These tools expose prior business strategy analyses.","reasoning":"They are read-only and do not consume allowance.","risk_type":"private_data_read","severity":"low","title":"Reads private analysis history/results","triggering_tools_or_skills":["list_analyses","get_analysis","get_feature_analysis"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; run_analysis consumes the signed-in plan allowance after confirmation.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/9af5b081-24aa-4dac-a506-f3029b5d9d36.json","what_it_proves":"Candidate PR #125 record identity (name \"AI事業変革シミュレーター\", publisher, type web_connector) and 5 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/9af5b081-24aa-4dac-a506-f3029b5d9d36: complete tool_names inventory (5 tools), remote streamable-http endpoint https://strategy.feelflow.net/api/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"AI Business Transformation Simulator consumes limited analysis allowance.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:9af5b081-24aa-4dac-a506-f3029b5d9d36","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all five tools; confirmation is a safeguard.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"true"},"tools_or_skills_reviewed":5,"tools_or_skills_total":5},"name":"AI事業変革シミュレーター","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=9af5b081-24aa-4dac-a506-f3029b5d9d36&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://strategy.feelflow.net/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"FeelFlow Inc.","publisher_url":"https://feelflow.net/","remote_url":"https://strategy.feelflow.net/api/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: It spends limited subscription quota.","evidence":"Consumes analysis allowance: The listing explicitly says only a new analysis consumes plan usage and shows the amount before confirmation.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Consumes analysis allowance","triggering_tools":["run_analysis"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: They are read-only and do not consume allowance.","evidence":"Reads private analysis history/results: These tools expose prior business strategy analyses.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads private analysis history/results","triggering_tools":["list_analyses","get_analysis","get_feature_analysis"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://id.feelflow.net/contact","tags":["network_access","oauth_required","reads_private_data","spends_money","web_connector"],"tools":[{"description":"","name":"get_analysis"},{"description":"","name":"get_feature_analysis"},{"description":"","name":"get_usage"},{"description":"","name":"list_analyses"},{"description":"","name":"run_analysis","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: It spends limited subscription quota."}}],"tools_count":5,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/9af5b081-24aa-4dac-a506-f3029b5d9d36","uuid":"0547ee5f-c0f9-5351-8776-6332006999f9","verification_tier":"community","version":""},"query_key":"ai","schema_version":1,"status":"match"}