{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","catalog_reconciliation":{"basis":"Documented actions on the identified catalog surface; not an execution test.","confidence":"medium","evidence_completeness":"partial","previous":{"confidence":"low","detail_sha256":"051623b45939bae71f848f2b24592538d3fc507b583d436019e1c9f74a8c243f","risk":"high"},"proposal_file":"parent-proposals.json","rationale":"Agrees with first pass (Medium). DeviceLink docs say the AI 'can read files, list directories, and search' within user-chosen shared folders, behind a secret denylist, org/workspace policies, and .devicelinkignore. No write, delete, or execute is documented. Local files and codebases are sensitive private data, so Medium rather than the displayed Low card. High was set as a provisional ceiling for the generic device_tool_call dispatcher, which is an evidence gap, not an evidenced High action.","review_key":"claudesec:cb35abf3-3856-4a66-a92b-23fac8386cff","reviewed_at":"2026-10-12","runtime_verified":false,"sources":["blind packet stored_tool_inventory","https://devicelink.ai/docs","https://devicelink.ai/docs/how-sharing-works"],"status":"resolved"},"category":"Web Connector","confidence":"low","description":"Read files on your own computer through DeviceLink. Search codebases and list or inspect files within folders you choose. Access depends on the running local agent and configured permissions or file policies.","did":"cb35abf3-3856-4a66-a92b-23fac8386cff","documentation_url":"https://devicelink.ai/docs","editorial_description":{"extended_description":"DeviceLink streams requested files from the connected machine while its agent is running. Organizations and workspaces support role-based team access. Folder scope and policies govern what is exposed, and the service describes credential and secret blocking as part of its access controls.","schema_version":1,"summary":"Read files on your own computer through DeviceLink.\nSearch codebases and list or inspect files within folders you choose.\nAccess depends on the running local agent and configured permissions or file policies."},"homepage_url":"","icon":"","id":"cb35abf3-3856-4a66-a92b-23fac8386cff","installs":0,"last_scanned":"","license":"","long_description":"DeviceLink streams requested files from the connected machine while its agent is running. Organizations and workspaces support role-based team access. Folder scope and policies govern what is exposed, and the service describes credential and secret blocking as part of its access controls.","manual_assessment":"unassessed","manual_review":{"all_findings":[{"evidence":"The listing says DeviceLink streams folders from the user's computer, including codebase search, file reads and directory listing.","reasoning":"Local file/repository content is sensitive even when access is read-only and folder-scoped.","risk_type":"private_data_read","severity":"low","title":"Selected local files and repositories can be read","triggering_tools_or_skills":["device_tool_call","discover"]},{"evidence":"Only a dispatcher and discovery tool are listed; the official docs page returned no readable content and no action list or schemas are present.","reasoning":"Without the discovered action inventory, writes, deletion, command execution or policy bypass cannot be ruled out; provisional High is conservative rather than verified.","risk_type":"generic_gateway","severity":"low","title":"Generic device actions are undisclosed","triggering_tools_or_skills":["device_tool_call","discover"]},{"evidence":"The connector runs at https://api.devicelink.ai/mcp without a pinned server implementation in the packet.","reasoning":"The hosted implementation and tool behavior can change independently of this snapshot, so monitoring and runtime verification remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"DeviceLink is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication and selected-folder policies are described at a high level, but the action/scopes exposed through device_tool_call are not enumerated.","blocked_missing_evidence":"Descriptions and input schemas for device_tool_call and discover, including the complete discoverable action list and enforcement of read-only folder/file boundaries.","confidence":"low","displayed_risk":"high","evidence_completeness":"insufficient","manual_overall_risk":"unassessed","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/cb35abf3-3856-4a66-a92b-23fac8386cff.json","what_it_proves":"Candidate PR #125 record identity (name \"DeviceLink\", publisher, type web_connector) and 3 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/cb35abf3-3856-4a66-a92b-23fac8386cff: complete tool_names inventory (3 tools), remote streamable-http endpoint https://api.devicelink.ai/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"DeviceLink clearly reads selected local files, but its generic device dispatcher hides the complete reachable action set.","provisional_risk":"high","publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:cb35abf3-3856-4a66-a92b-23fac8386cff","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 3 names. The official docs page had zero readable lines. Do not publish a definitive safe rating until tool descriptions/schemas and the discovery output are independently captured.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"unknown","deletes_data":"unknown","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"unknown","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"unknown","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":3,"tools_or_skills_total":3},"name":"DeviceLink","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=cb35abf3-3856-4a66-a92b-23fac8386cff&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://devicelink.ai/privacy","provisional_risk":"high","publication_recommendation":"fix","publisher":"DeviceLink","publisher_url":"https://devicelink.ai/","remote_url":"https://api.devicelink.ai/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"DeviceLink can list directories, search and read files in the folders explicitly shared with it. Workspace policies, ignored paths and the secret denylist restrict this access.","evidence":"https://devicelink.ai/docs/how-sharing-works\nread files, list directories, search within shared folder\n\nhttps://devicelink.ai/docs\nthree filter layers, denylist","risk_type":"filesystem_access","severity":"medium","title":"Reads files in shared local folders"}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://devicelink.ai/support","tags":["filesystem_access"],"tools":[{"description":"","name":"device_tool_call"},{"description":"","name":"health"},{"description":"","name":"discover"}],"tools_count":3,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/cb35abf3-3856-4a66-a92b-23fac8386cff","uuid":"2bee0acd-06b1-5f31-a000-8ad70a58d345","verification_tier":"community","version":""},"query_key":"devicelink","schema_version":1,"status":"match"}