{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-29","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"reviewed","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Manage home-maintenance records in Domus. Look up appliances, filters, warranties and documents. Update equipment, log repairs and schedule or complete maintenance tasks.","did":"0b9204b5-f268-4345-a5cb-6f75d4842d41","documentation_url":"https://getdomus.app/ai/","editorial_description":{"extended_description":"The connector can open inspection reports and other documents, identify expiring warranties, mark filters changed and complete tasks. It supports multiple homes accessible through the connected Domus account and includes both reading and updating records.","schema_version":1,"summary":"Manage home-maintenance records in Domus.\nLook up appliances, filters, warranties and documents.\nUpdate equipment, log repairs and schedule or complete maintenance tasks."},"homepage_url":"","icon":"https://getdomus.app/icon-512.png","id":"0b9204b5-f268-4345-a5cb-6f75d4842d41","installs":0,"last_scanned":"","license":"","long_description":"The connector can open inspection reports and other documents, identify expiring warranties, mark filters changed and complete tasks. It supports multiple homes accessible through the connected Domus account and includes both reading and updating records.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"Official page and inventory confirm adding appliances, logging repairs, scheduling or completing maintenance, and updating records.","reasoning":"These actions persistently change the home's system of record.","risk_type":"data_modification","severity":"medium","title":"Home assets and maintenance state can change","triggering_tools_or_skills":["complete_task","create_asset","create_maintenance_task","log_service","mark_filter_changed","update_asset"]},{"evidence":"The connector reads property records, inspection documents, appliance model and serial details, schedules, filters, and warranties.","reasoning":"Home locations, documents, equipment identifiers, and maintenance history are sensitive personal data.","risk_type":"private_data_read","severity":"low","title":"Properties, documents, serials, and warranties are readable","triggering_tools_or_skills":["get_document","get_home","list_assets","list_documents","list_homes","warranties_expiring"]},{"evidence":"Inspection reports and other uploaded home documents are returned to the assistant.","reasoning":"Document text is untrusted model input.","risk_type":"prompt_injection_exposure","severity":"low","title":"Home documents enter context","triggering_tools_or_skills":["get_document","list_documents"]}],"assessment_status":"reviewed","auth_and_scopes":"Standard OAuth scoped to the user's Domus account, revocable per assistant; the user can alternatively issue a read-only connection.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"medium","evidence_completeness":"complete","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/0b9204b5-f268-4345-a5cb-6f75d4842d41.json","what_it_proves":"Candidate PR #125 record identity (name \"Domus\", publisher, type web_connector) and 15 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/0b9204b5-f268-4345-a5cb-6f75d4842d41: complete tool_names inventory (15 tools), remote streamable-http endpoint https://api.getdomus.app/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T20:54:43Z","url_or_path":"https://getdomus.app/ai/","what_it_proves":"Official page confirms OAuth account scoping, revocation, optional read-only connections, and read-write actions for assets and maintenance records."}],"primary_reason":"Official documentation confirms bounded create and update actions over home records, with no delete, messaging, execution, or payment tools.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":false,"review_key":"claude:0b9204b5-f268-4345-a5cb-6f75d4842d41","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 15 tools against the official page; catalog should mention that users can choose a read-only connection even though the default Claude integration supports writes.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":15,"tools_or_skills_total":15},"name":"Domus","needs_runtime_verification":false,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=0b9204b5-f268-4345-a5cb-6f75d4842d41&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://getdomus.app/privacy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Domus","publisher_url":"https://getdomus.app/","remote_url":"https://api.getdomus.app/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently change the home's system of record.","evidence":"Home assets and maintenance state can change: Official page and inventory confirm adding appliances, logging repairs, scheduling or completing maintenance, and updating records.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Home assets and maintenance state can change","triggering_tools":["complete_task","create_asset","create_maintenance_task","log_service","mark_filter_changed","update_asset"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Home locations, documents, equipment identifiers, and maintenance history are sensitive personal data.","evidence":"Properties, documents, serials, and warranties are readable: The connector reads property records, inspection documents, appliance model and serial details, schedules, filters, and warranties.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Properties, documents, serials, and warranties are readable","triggering_tools":["get_document","get_home","list_assets","list_documents","list_homes","warranties_expiring"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@getdomus.app","tags":["modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"complete_task","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently change the home's system of record."}},{"description":"","name":"create_asset","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently change the home's system of record."}},{"description":"","name":"create_maintenance_task","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently change the home's system of record."}},{"description":"","name":"get_asset"},{"description":"","name":"get_document"},{"description":"","name":"get_home"},{"description":"","name":"list_assets"},{"description":"","name":"list_documents"},{"description":"","name":"list_filters"},{"description":"","name":"list_homes"},{"description":"","name":"list_maintenance"},{"description":"","name":"log_service","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently change the home's system of record."}},{"description":"","name":"mark_filter_changed","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently change the home's system of record."}},{"description":"","name":"update_asset","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently change the home's system of record."}},{"description":"","name":"warranties_expiring"}],"tools_count":15,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/0b9204b5-f268-4345-a5cb-6f75d4842d41","uuid":"de5cfcde-98ff-5c5e-b91c-3333e1872c09","verification_tier":"community","version":""},"query_key":"domus","schema_version":1,"status":"match"}