{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-29","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Manage EnkinGT projects, tasks and work logs from Claude. Create or update work items and review daily reports, attendance and effort. Summarize time by user or project and maintain the supporting work-log records.","did":"cf60cbe0-2d06-43b8-89bb-8caccfc06bf3","documentation_url":"https://support.enkinlab.com/","editorial_description":{"extended_description":"The connector can add or copy projects, inspect milestones and issue types, and create, edit or delete work logs. Task details and project searches provide context for effort reporting.","schema_version":1,"summary":"Manage EnkinGT projects, tasks and work logs from Claude.\nCreate or update work items and review daily reports, attendance and effort.\nSummarize time by user or project and maintain the supporting work-log records."},"homepage_url":"","icon":"https://products.enkinlab.com/images/favicon3.ico","id":"cf60cbe0-2d06-43b8-89bb-8caccfc06bf3","installs":0,"last_scanned":"","license":"","long_description":"The connector can add or copy projects, inspect milestones and issue types, and create, edit or delete work logs. Task details and project searches provide context for effort reporting.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly declares a worklog deletion action.","reasoning":"Deleting time/work records is destructive business-data action.","risk_type":"data_deletion","severity":"high","title":"Worklogs can be deleted","triggering_tools_or_skills":["enkingt_deleteWorklog"]},{"evidence":"The inventory includes explicit persistent writes.","reasoning":"These materially alter project and time records.","risk_type":"data_modification","severity":"medium","title":"Projects, tasks and worklogs can be created or updated","triggering_tools_or_skills":["enkingt_addProject","enkingt_copyProject","enkingt_createTask","enkingt_createWorklog","enkingt_updateTask","enkingt_updateWorklog"]},{"evidence":"No schema or official MCP reference was available for fetch.","reasoning":"A URL-controlled fetch could add arbitrary network reach; this remains unknown rather than assumed.","risk_type":"evidence_gap","severity":"low","title":"Generic fetch input scope is unknown","triggering_tools_or_skills":["fetch"]},{"evidence":"The connector runs at https://mcp.enkinlab.net/mcp without a pinned server implementation in the packet.","reasoning":"The hosted implementation can change independently of this snapshot, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"EnkinGT is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for EnkinGT projects, tasks and worklogs; exact scopes are not published.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/cf60cbe0-2d06-43b8-89bb-8caccfc06bf3.json","what_it_proves":"Candidate PR #125 record identity (name \"EnkinGT\", publisher, type web_connector) and 26 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/cf60cbe0-2d06-43b8-89bb-8caccfc06bf3: complete tool_names inventory (26 tools), remote streamable-http endpoint https://mcp.enkinlab.net/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"EnkinGT can delete worklogs and modify project/task records.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:cf60cbe0-2d06-43b8-89bb-8caccfc06bf3","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 26 tools. High follows deleteWorklog; fetch requires a parameter schema to settle arbitrary_network_access.","risk_domains":{"arbitrary_network_access":"unknown","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":26,"tools_or_skills_total":26},"name":"EnkinGT","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=cf60cbe0-2d06-43b8-89bb-8caccfc06bf3&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://products.enkinlab.com/privacy.html","provisional_risk":null,"publication_recommendation":"accept","publisher":"ENKINLAB Inc.","publisher_url":"https://www.enkinlab.com/","remote_url":"https://mcp.enkinlab.net/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Deleting time/work records is destructive business-data action.","evidence":"Worklogs can be deleted: The complete inventory explicitly declares a worklog deletion action.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Worklogs can be deleted","triggering_tools":["enkingt_deleteWorklog"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These materially alter project and time records.","evidence":"Projects, tasks and worklogs can be created or updated: The inventory includes explicit persistent writes.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Projects, tasks and worklogs can be created or updated","triggering_tools":["enkingt_addProject","enkingt_copyProject","enkingt_createTask","enkingt_createWorklog","enkingt_updateTask","enkingt_updateWorklog"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://support.enkinlab.com/","tags":["deletes_data","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"enkingt_addProject","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These materially alter project and time records."}},{"description":"","name":"enkingt_copyProject","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These materially alter project and time records."}},{"description":"","name":"enkingt_createTask","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These materially alter project and time records."}},{"description":"","name":"enkingt_createWorklog","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These materially alter project and time records."}},{"description":"","name":"enkingt_deleteWorklog","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting time/work records is destructive business-data action."}},{"description":"","name":"enkingt_getDailyReportDetail"},{"description":"","name":"enkingt_getDailyReports"},{"description":"","name":"enkingt_getProjectTasks"},{"description":"","name":"enkingt_getTaskDetails"},{"description":"","name":"enkingt_getWorklog"},{"description":"","name":"enkingt_listWorklogs"},{"description":"","name":"enkingt_projectEffort"},{"description":"","name":"enkingt_projectIssueTypes"},{"description":"","name":"enkingt_projectList"},{"description":"","name":"enkingt_projectMilestoneList"},{"description":"","name":"enkingt_reportWorklogs"},{"description":"","name":"enkingt_updateTask","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These materially alter project and time records."}},{"description":"","name":"enkingt_updateWorklog","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These materially alter project and time records."}},{"description":"","name":"enkingt_userAttendance"},{"description":"","name":"enkingt_userEffort"},{"description":"","name":"enkingt_userList"},{"description":"","name":"enkingt_weeklyWorklogSummary"},{"description":"","name":"enkingt_whoAmI"},{"description":"","name":"enkingt_worklogUserEffort"},{"description":"","name":"fetch"},{"description":"","name":"search"}],"tools_count":26,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/cf60cbe0-2d06-43b8-89bb-8caccfc06bf3","uuid":"9772c469-0ad3-5fd9-9bc6-eccb3a5626e3","verification_tier":"community","version":""},"query_key":"enkinlab inc enkingt","schema_version":1,"status":"match"}