{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-27","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Maintain project continuity across AI tools with Arkon Vault. Search context, record decisions and create or accept structured handoffs. It stores information deliberately submitted through Vault, not the surrounding chat or local files.","did":"1749f9ba-cd1c-43e2-b04d-b8680424ab5b","documentation_url":"https://vault.arkoncybersecurity.com/support","editorial_description":{"extended_description":"Project checkpoints and saved state help another session find the next action. The sync operation refreshes the server-side index or configured Notion mirror. Optional Windows Arkon Sync software is separate and requires its own opt-in; this connector cannot start it.","schema_version":1,"summary":"Maintain project continuity across AI tools with Arkon Vault.\nSearch context, record decisions and create or accept structured handoffs.\nIt stores information deliberately submitted through Vault, not the surrounding chat or local files."},"homepage_url":"","icon":"https://vault.arkoncybersecurity.com/arkon-logo-v2.png","id":"1749f9ba-cd1c-43e2-b04d-b8680424ab5b","installs":0,"last_scanned":"","license":"","long_description":"Project checkpoints and saved state help another session find the next action. The sync operation refreshes the server-side index or configured Notion mirror. Optional Windows Arkon Sync software is separate and requires its own opt-in; this connector cannot start it.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The listing says these tools deliberately store continuity content, preserve decisions, publish checkpoints, create structured handoffs, save project state and refresh an optional Notion mirror.","reasoning":"They persist private project and team-continuity records and may update a configured external mirror.","risk_type":"data_modification","severity":"medium","title":"Stores projects, decisions, checkpoints and handoffs","triggering_tools_or_skills":["vault_accept_handoff","vault_checkpoint_handoff","vault_complete_handoff","vault_log_decision","vault_post_handoff","vault_save_project","vault_sync"]},{"evidence":"The connector searches and retrieves tenant-isolated project context and handoff state.","reasoning":"This is private continuity data.","risk_type":"private_data_read","severity":"low","title":"Reads private projects, conflicts and handoffs","triggering_tools_or_skills":["vault_get_context","vault_get_project","vault_list_conflicts","vault_list_handoffs","vault_search_projects"]},{"evidence":"Continuity content is deliberately written by users and other AI sessions.","reasoning":"Stored cross-agent text can contain adversarial instructions.","risk_type":"prompt_injection_exposure","severity":"low","title":"Handoff and project text is user-authored","triggering_tools_or_skills":["vault_get_context","vault_get_project","vault_list_handoffs"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes projects and handoffs to the user's tenant; optional Notion mirror permissions and team-handoff visibility are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/1749f9ba-cd1c-43e2-b04d-b8680424ab5b.json","what_it_proves":"Candidate PR #125 record identity (name \"Arkon Vault\", publisher, type web_connector) and 13 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/1749f9ba-cd1c-43e2-b04d-b8680424ab5b: complete tool_names inventory (13 tools), remote streamable-http endpoint https://vault.arkoncybersecurity.com/mcp, auth_posture auth_required, publisher-declared permissions text, directory tier community"},{"accessed_at":"2026-10-10T21:09:20Z","url_or_path":"https://vault.arkoncybersecurity.com/support","what_it_proves":"Official Arkon support documentation confirms the private tenant-isolated continuity service, independent AI connections, optional Windows sync and data export/deletion controls."}],"primary_reason":"The connector writes private project-continuity, decision and handoff records but exposes no deletion or external messaging action.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:1749f9ba-cd1c-43e2-b04d-b8680424ab5b","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 13 names. Runtime verification should confirm vault_sync cannot start local Windows sync, cannot read local files and only updates the configured tenant/Notion mirror.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":13,"tools_or_skills_total":13},"name":"Arkon Vault","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=1749f9ba-cd1c-43e2-b04d-b8680424ab5b&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://vault.arkoncybersecurity.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Zachary Hammons","publisher_url":"https://vault.arkoncybersecurity.com/","remote_url":"https://vault.arkoncybersecurity.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist private project and team-continuity records and may update a configured external mirror.","evidence":"Stores projects, decisions, checkpoints and handoffs: The listing says these tools deliberately store continuity content, preserve decisions, publish checkpoints, create structured handoffs, save project state and refresh an optional Notion mirror.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Stores projects, decisions, checkpoints and handoffs","triggering_tools":["vault_accept_handoff","vault_checkpoint_handoff","vault_complete_handoff","vault_log_decision","vault_post_handoff","vault_save_project","vault_sync"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: This is private continuity data.","evidence":"Reads private projects, conflicts and handoffs: The connector searches and retrieves tenant-isolated project context and handoff state.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads private projects, conflicts and handoffs","triggering_tools":["vault_get_context","vault_get_project","vault_list_conflicts","vault_list_handoffs","vault_search_projects"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://vault.arkoncybersecurity.com/support","tags":["modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"vault_accept_handoff","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist private project and team-continuity records and may update a configured external mirror."}},{"description":"","name":"vault_checkpoint_handoff","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist private project and team-continuity records and may update a configured external mirror."}},{"description":"","name":"vault_complete_handoff","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist private project and team-continuity records and may update a configured external mirror."}},{"description":"","name":"vault_get_context"},{"description":"","name":"vault_get_project"},{"description":"","name":"vault_list_conflicts"},{"description":"","name":"vault_list_handoffs"},{"description":"","name":"vault_log_decision","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist private project and team-continuity records and may update a configured external mirror."}},{"description":"","name":"vault_post_handoff","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist private project and team-continuity records and may update a configured external mirror."}},{"description":"","name":"vault_preflight"},{"description":"","name":"vault_save_project","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist private project and team-continuity records and may update a configured external mirror."}},{"description":"","name":"vault_search_projects"},{"description":"","name":"vault_sync","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist private project and team-continuity records and may update a configured external mirror."}}],"tools_count":13,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/1749f9ba-cd1c-43e2-b04d-b8680424ab5b","uuid":"51d43b57-a59e-55c3-8b16-c6d163210802","verification_tier":"community","version":""},"query_key":"arkon vault","schema_version":1,"status":"match"}