{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-17","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"no_auth","category":"Web Connector","confidence":"medium","description":"Turn business rules and requirements into visual models with Genny. Build DMN decision models and BPMN process models from documents, code, or spreadsheets. Review and refine the result in Blue Polaris Modeler.","did":"d0cff24f-31c5-4c84-8743-fe2ca70afe79","documentation_url":"https://genny.bluepolaris.ai/docs","editorial_description":{"extended_description":"Multiple files can contribute to a unified model, and larger conversions can run asynchronously with status checks. Inputs include Java, COBOL, DRL, PDF, Word, Excel, CSV, JSON, XML, and text. Diagram tools inspect models and move or rename nodes; generated models include a link to the Modeler.","schema_version":1,"summary":"Turn business rules and requirements into visual models with Genny.\nBuild DMN decision models and BPMN process models from documents, code, or spreadsheets.\nReview and refine the result in Blue Polaris Modeler."},"homepage_url":"","icon":"https://bluepolaris.com/wp-content/uploads/2026/09/bluepolaris-person.jpeg","id":"d0cff24f-31c5-4c84-8743-fe2ca70afe79","installs":0,"last_scanned":"","license":"","long_description":"Multiple files can contribute to a unified model, and larger conversions can run asynchronously with status checks. Inputs include Java, COBOL, DRL, PDF, Word, Excel, CSV, JSON, XML, and text. Diagram tools inspect models and move or rename nodes; generated models include a link to the Modeler.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The inventory and listing describe uploading source files and generating DMN/BPMN models for later editing.","reasoning":"This creates persistent model/file artifacts.","risk_type":"file_write","severity":"medium","title":"Files can be uploaded/imported and converted into decision models","triggering_tools_or_skills":["create_upload_ticket","import_file","import_files","start_dmn_conversion","convert_to_dmn"]},{"evidence":"The tool names directly modify diagram structure.","reasoning":"These actions persist model changes.","risk_type":"data_modification","severity":"medium","title":"Decision diagrams can be built, moved and renamed","triggering_tools_or_skills":["dfm_build_drd","dfm_move_node","dfm_rename_node"]},{"evidence":"The connector runs at https://genny.bluepolaris.ai/mcp without a pinned server implementation in the packet.","reasoning":"The hosted implementation can change independently of this snapshot, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Genny – Generative Process and Decision Modeler by Blue Polaris is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"No authentication is required according to the Directory, but the listing does not explain how imported models/files are isolated or persisted.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/d0cff24f-31c5-4c84-8743-fe2ca70afe79.json","what_it_proves":"Candidate PR #125 record identity (name \"Genny – Generative Process and Decision Modeler by Blue Polaris\", publisher, type web_connector) and 14 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/d0cff24f-31c5-4c84-8743-fe2ca70afe79: complete tool_names inventory (14 tools), remote streamable-http endpoint https://genny.bluepolaris.ai/mcp, auth_posture no_auth, directory tier community"}],"primary_reason":"Genny uploads source files and creates/edits process and decision models without a documented auth boundary.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:d0cff24f-31c5-4c84-8743-fe2ca70afe79","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 14 tools. The official docs URL was inaccessible; publication should clarify no-auth storage/tenant isolation, but Medium write capability is established.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"false","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":14,"tools_or_skills_total":14},"name":"Genny – Generative Process and Decision Modeler by Blue Polaris","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=d0cff24f-31c5-4c84-8743-fe2ca70afe79&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://genny.bluepolaris.ai/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Blue Polaris Inc","publisher_url":"https://bluepolaris.com/","remote_url":"https://genny.bluepolaris.ai/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, change, export, or otherwise write files. Review findings: This creates persistent model/file artifacts.","evidence":"Files can be uploaded/imported and converted into decision models: The inventory and listing describe uploading source files and generating DMN/BPMN models for later editing.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Files can be uploaded/imported and converted into decision models","triggering_tools":["create_upload_ticket","import_file","import_files","start_dmn_conversion","convert_to_dmn"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist model changes.","evidence":"Decision diagrams can be built, moved and renamed: The tool names directly modify diagram structure.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Decision diagrams can be built, moved and renamed","triggering_tools":["dfm_build_drd","dfm_move_node","dfm_rename_node"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@bluepolaris.com","tags":["filesystem_access","modifies_data","network_access","web_connector"],"tools":[{"description":"","name":"check_dmn_conversion"},{"description":"","name":"connect_dfm"},{"description":"","name":"convert_to_dmn","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: This creates persistent model/file artifacts."}},{"description":"","name":"create_upload_ticket","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: This creates persistent model/file artifacts."}},{"description":"","name":"dfm_build_drd","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist model changes."}},{"description":"","name":"dfm_describe_drd"},{"description":"","name":"dfm_find_diagram"},{"description":"","name":"dfm_move_node","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist model changes."}},{"description":"","name":"dfm_rename_node","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist model changes."}},{"description":"","name":"generate_request_id"},{"description":"","name":"get_identity"},{"description":"","name":"import_file","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: This creates persistent model/file artifacts."}},{"description":"","name":"import_files","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: This creates persistent model/file artifacts."}},{"description":"","name":"start_dmn_conversion","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: This creates persistent model/file artifacts."}}],"tools_count":14,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/d0cff24f-31c5-4c84-8743-fe2ca70afe79","uuid":"3f090443-eb43-5e63-9aa7-2b71cfe917d4","verification_tier":"community","version":""},"query_key":"genny generative process and decision modeler by blue polaris","schema_version":1,"status":"match"}