{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-13","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Gives Claude read-only access to your Archisketch interior-design workspace. Explore projects, floorplans, furniture and finishes; review room-level costs and export estimate PDFs. Requires an Archisketch account and cannot edit designs or furniture placement.","did":"1cfa104e-031b-4345-9c9b-b0be87d558af","documentation_url":"https://www.archisketch.com/ko/blog/6784a5a07860420012d4a235","editorial_description":{"extended_description":"Browse personal, shared and bookmarked projects, including layouts, placed furniture and applied materials. Search public building floorplans and personal or enterprise product libraries by attributes such as name, tags or SKU, with dimensions, variants, prices and image previews.","schema_version":1,"summary":"Gives Claude read-only access to your Archisketch interior-design workspace.\nExplore projects, floorplans, furniture and finishes; review room-level costs and export estimate PDFs.\nRequires an Archisketch account and cannot edit designs or furniture placement."},"homepage_url":"","icon":"","id":"1cfa104e-031b-4345-9c9b-b0be87d558af","installs":0,"last_scanned":"","license":"","long_description":"Browse personal, shared and bookmarked projects, including layouts, placed furniture and applied materials. Search public building floorplans and personal or enterprise product libraries by attributes such as name, tags or SKU, with dimensions, variants, prices and image previews.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"The Directory description explicitly calls the connector read-only and says it browses projects, analyzes costs and renders downloadable estimate PDFs; no create/update/delete project tool exists.","reasoning":"Project geometry, pricing and estimates are sensitive but the connector does not modify them.","risk_type":"private_data_read","severity":"low","title":"Reads private interior-design projects and costs","triggering_tools_or_skills":["get-my-projects","get-project-summary","get-project-cost","get-projects-shared-with-me","export-project-estimate"]},{"evidence":"The listed documentation URL resolves to a Korean privacy policy rather than connector instructions or tool definitions.","reasoning":"Users cannot verify the connector's read-only claim from the supplied documentation field.","risk_type":"identity_discrepancy","severity":"low","title":"Documentation link points to privacy policy","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth grants read-only access to personal/shared/bookmarked projects, product libraries and estimates according to the Directory description; exact project-sharing boundaries are undocumented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/1cfa104e-031b-4345-9c9b-b0be87d558af.json","what_it_proves":"Candidate PR #125 record identity (name \"Archisketch\", publisher, type web_connector) and 12 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/1cfa104e-031b-4345-9c9b-b0be87d558af: complete tool_names inventory (12 tools), remote streamable-http endpoint https://mcp.archisketch.com/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:16:38Z","url_or_path":"https://www.archisketch.com/ko/blog/6784a5a07860420012d4a235","what_it_proves":"The supplied documentation URL is actually Archisketch's privacy policy, not MCP documentation; it confirms product identity and sensitivity of project/design data only."}],"primary_reason":"Archisketch is described and inventoried as read-only, but its documentation metadata is mislinked.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:1cfa104e-031b-4345-9c9b-b0be87d558af","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 12 names, Directory description and supplied official URL. Replace the documentation URL with an MCP guide and confirm generated estimate PDFs are ephemeral exports rather than saved account artifacts.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":12,"tools_or_skills_total":12},"name":"Archisketch","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=1cfa104e-031b-4345-9c9b-b0be87d558af&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.archisketch.com/en/blog/6784a5a07860420012d4a235","provisional_risk":null,"publication_recommendation":"fix","publisher":"Archisketch","publisher_url":"https://archisketch.com/","remote_url":"https://mcp.archisketch.com/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Project geometry, pricing and estimates are sensitive but the connector does not modify them.","evidence":"Reads private interior-design projects and costs: The Directory description explicitly calls the connector read-only and says it browses projects, analyzes costs and renders downloadable estimate PDFs; no create/update/delete project tool exists.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads private interior-design projects and costs","triggering_tools":["get-my-projects","get-project-summary","get-project-cost","get-projects-shared-with-me","export-project-estimate"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@archisketch.com","tags":["network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"export-project-estimate"},{"description":"","name":"get-bookmarked-projects"},{"description":"","name":"get-my-projects"},{"description":"","name":"get-project-cost"},{"description":"","name":"get-project-summary"},{"description":"","name":"get-projects-shared-by-me"},{"description":"","name":"get-projects-shared-with-me"},{"description":"","name":"get-user-info"},{"description":"","name":"search-finishes"},{"description":"","name":"search-furniture-library"},{"description":"","name":"search-public-floorplans"},{"description":"","name":"show-images"}],"tools_count":12,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/1cfa104e-031b-4345-9c9b-b0be87d558af","uuid":"94b9b307-ab71-5bc2-8cf9-0fb4c1691a40","verification_tier":"community","version":""},"query_key":"archisketch archisketch","schema_version":1,"status":"match"}