{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-22","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Interactive Connector","confidence":"medium","description":"AppSkyline tracks app-store keyword rankings in Claude. Review monitored apps, keyword history, current ranks, and store search results. Add or remove tracked keywords across the App Store, Google Play, and Microsoft Store within your account's permissions.","did":"5e75e03f-8dcc-4f6c-90e7-6d9a82ca4dd6","documentation_url":"https://www.appskyline.com/developers/#claude-mcp","editorial_description":{"extended_description":"","schema_version":1,"summary":"AppSkyline tracks app-store keyword rankings in Claude.\nReview monitored apps, keyword history, current ranks, and store search results.\nAdd or remove tracked keywords across the App Store, Google Play, and Microsoft Store within your account's permissions."},"homepage_url":"","icon":"","id":"5e75e03f-8dcc-4f6c-90e7-6d9a82ca4dd6","installs":0,"last_scanned":"","license":"","long_description":"","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete nine-tool inventory contains delete_keyword paired with add_keyword and list_keywords.","reasoning":"Deleting a saved keyword destroys meaningful monitoring configuration and its continued tracking.","risk_type":"data_deletion","severity":"high","title":"Deletes tracked ranking keywords","triggering_tools_or_skills":["delete_keyword"]},{"evidence":"The connector lists authenticated apps and tracked keyword histories in the AppSkyline account.","reasoning":"Tracked application and keyword analytics can be private business data.","risk_type":"private_data_read","severity":"low","title":"Reads private application ranking history","triggering_tools_or_skills":["get_keyword_history","get_keyword_rank","list_apps","list_keywords"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; application/keyword ownership and account scopes are unspecified.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/5e75e03f-8dcc-4f6c-90e7-6d9a82ca4dd6.json","what_it_proves":"Candidate PR #125 record identity (name \"AppSkyline\", publisher, type interactive_connector) and 9 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/5e75e03f-8dcc-4f6c-90e7-6d9a82ca4dd6: complete tool_names inventory (9 tools), remote streamable-http endpoint https://mcp.appskyline.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"AppSkyline can permanently delete a user’s tracked ranking keyword.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:5e75e03f-8dcc-4f6c-90e7-6d9a82ca4dd6","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all nine tools. Store-result search and app reads do not purchase or publish anything; add_keyword is a Medium configuration write, while delete_keyword determines the overall rating.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":9,"tools_or_skills_total":9},"name":"AppSkyline","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=5e75e03f-8dcc-4f6c-90e7-6d9a82ca4dd6&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.appskyline.com/en/privacy-policy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Waiterio LLC","publisher_url":"https://www.appskyline.com/","remote_url":"https://mcp.appskyline.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Deleting a saved keyword destroys meaningful monitoring configuration and its continued tracking.","evidence":"Deletes tracked ranking keywords: The complete nine-tool inventory contains delete_keyword paired with add_keyword and list_keywords.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes tracked ranking keywords","triggering_tools":["delete_keyword"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Tracked application and keyword analytics can be private business data.","evidence":"Reads private application ranking history: The connector lists authenticated apps and tracked keyword histories in the AppSkyline account.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads private application ranking history","triggering_tools":["get_keyword_history","get_keyword_rank","list_apps","list_keywords"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"info@appskyline.com","tags":["deletes_data","interactive_connector","network_access","oauth_required","reads_private_data"],"tools":[{"description":"","name":"add_keyword"},{"description":"","name":"delete_keyword","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting a saved keyword destroys meaningful monitoring configuration and its continued tracking."}},{"description":"","name":"get_app"},{"description":"","name":"get_keyword_history"},{"description":"","name":"get_keyword_rank"},{"description":"","name":"list_apps"},{"description":"","name":"list_keywords"},{"description":"","name":"search_store_results"},{"description":"","name":"show_app_overview"}],"tools_count":9,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/5e75e03f-8dcc-4f6c-90e7-6d9a82ca4dd6","uuid":"020a5d32-8c17-5c3c-831f-7e5928a2b3b0","verification_tier":"community","version":""},"query_key":"appskyline","schema_version":1,"status":"match"}