{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-18","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Esteborg provides coaching for sales, communication, leadership, and practical AI skills. Use professional context, assessments, evidence, and development plans to prepare or reflect on work. Optional CRM context is read-only; changes to Esteborg records require explicit user intent and authorization.","did":"5d8b5d17-84ef-4950-b8e3-fdb4d6411e10","documentation_url":"https://esteborg.live/en/ayudayfaqs","editorial_description":{"extended_description":"Supported CRM sources include HubSpot, Salesforce, Dynamics 365 Sales, Zoho CRM, and Pipedrive when explicitly connected. The service supports English, Spanish, Portuguese, French, German, and Italian and can maintain skills assessments and development roadmaps.","schema_version":1,"summary":"Esteborg provides coaching for sales, communication, leadership, and practical AI skills.\nUse professional context, assessments, evidence, and development plans to prepare or reflect on work.\nOptional CRM context is read-only; changes to Esteborg records require explicit user intent and authorization."},"homepage_url":"","icon":"https://esteborg88full-backend-modular.onrender.com/esteborg-connect-icon.png","id":"5d8b5d17-84ef-4950-b8e3-fdb4d6411e10","installs":0,"last_scanned":"","license":"","long_description":"Supported CRM sources include HubSpot, Salesforce, Dynamics 365 Sales, Zoho CRM, and Pipedrive when explicitly connected. The service supports English, Spanish, Portuguese, French, German, and Italian and can maintain skills assessments and development roadmaps.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The complete inventory records evidence, sets a roadmap and updates professional context in the authenticated Esteborg account.","reasoning":"These tools persist meaningful coaching and professional-profile data but do not name a destructive or external-send operation.","risk_type":"data_modification","severity":"medium","title":"Updates coaching context and roadmaps","triggering_tools_or_skills":["esteborg_record_evidence","esteborg_set_roadmap","esteborg_update_professional_context"]},{"evidence":"The declared read tools retrieve the user’s performance graph, professional context and optional connected CRM information.","reasoning":"The returned coaching and CRM context is private account data.","risk_type":"private_data_read","severity":"low","title":"Reads performance and CRM context","triggering_tools_or_skills":["esteborg_get_crm_context","esteborg_get_performance_graph","esteborg_get_professional_context"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; CRM connection scopes, roadmap permissions and tenant enforcement are unknown.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/5d8b5d17-84ef-4950-b8e3-fdb4d6411e10.json","what_it_proves":"Candidate PR #125 record identity (name \"Esteborg\", publisher, type web_connector) and 10 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/5d8b5d17-84ef-4950-b8e3-fdb4d6411e10: complete tool_names inventory (10 tools), remote streamable-http endpoint https://esteborg88full-backend-modular.onrender.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Esteborg can persist coaching evidence, roadmap state and professional context.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:5d8b5d17-84ef-4950-b8e3-fdb4d6411e10","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all ten names. The official documentation URL was inaccessible, so conclusions rely on the complete names-only inventory and listing description; no delete, send, execution or deployment operation is declared.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":10,"tools_or_skills_total":10},"name":"Esteborg","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=5d8b5d17-84ef-4950-b8e3-fdb4d6411e10&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://esteborg.live/en/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"WoOwPeople","publisher_url":"https://esteborg.live/","remote_url":"https://esteborg88full-backend-modular.onrender.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools persist meaningful coaching and professional-profile data but do not name a destructive or external-send operation.","evidence":"Updates coaching context and roadmaps: The complete inventory records evidence, sets a roadmap and updates professional context in the authenticated Esteborg account.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Updates coaching context and roadmaps","triggering_tools":["esteborg_record_evidence","esteborg_set_roadmap","esteborg_update_professional_context"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: The returned coaching and CRM context is private account data.","evidence":"Reads performance and CRM context: The declared read tools retrieve the user’s performance graph, professional context and optional connected CRM information.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads performance and CRM context","triggering_tools":["esteborg_get_crm_context","esteborg_get_performance_graph","esteborg_get_professional_context"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://esteborg.live/en/support","tags":["modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"esteborg_assess_skill"},{"description":"","name":"esteborg_get_crm_context"},{"description":"","name":"esteborg_get_performance_graph"},{"description":"","name":"esteborg_get_professional_context"},{"description":"","name":"esteborg_get_roadmap"},{"description":"","name":"esteborg_list_crm_connections"},{"description":"","name":"esteborg_list_skills"},{"description":"","name":"esteborg_record_evidence","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools persist meaningful coaching and professional-profile data but do not name a destructive or external-send operation."}},{"description":"","name":"esteborg_set_roadmap","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools persist meaningful coaching and professional-profile data but do not name a destructive or external-send operation."}},{"description":"","name":"esteborg_update_professional_context","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools persist meaningful coaching and professional-profile data but do not name a destructive or external-send operation."}}],"tools_count":10,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/5d8b5d17-84ef-4950-b8e3-fdb4d6411e10","uuid":"428cec67-c5da-5955-95bd-ea34c5ec9ffc","verification_tier":"community","version":""},"query_key":"esteborg","schema_version":1,"status":"match"}