{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-06","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Connects Claude to Grw sales data and its Taylor agent. Research deals, update CRM records and retrieve meeting transcripts or recordings. Message teams and run or schedule workflows; delegate broader questions to Taylor.","did":"b533c519-cf4c-4ff2-8e91-743201d2f75e","documentation_url":"https://app.grw.ai/claude/help","editorial_description":{"extended_description":"Connected systems include major CRMs, Slack and Microsoft Teams. Tools manage notes, scripts, skills and meeting clips, inspect pipeline performance and retrieve workflow runs. Some records and workflows can be deleted, and share links can expose selected material.","schema_version":1,"summary":"Connects Claude to Grw sales data and its Taylor agent.\nResearch deals, update CRM records and retrieve meeting transcripts or recordings.\nMessage teams and run or schedule workflows; delegate broader questions to Taylor."},"homepage_url":"","icon":"https://app.grw.ai/connector-icon.png","id":"b533c519-cf4c-4ff2-8e91-743201d2f75e","installs":0,"last_scanned":"","license":"","long_description":"Connected systems include major CRMs, Slack and Microsoft Teams. Tools manage notes, scripts, skills and meeting clips, inspect pipeline performance and retrieve workflow runs. Some records and workflows can be deleted, and share links can expose selected material.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"These tools communicate to coworkers as the connected user/agent.","reasoning":"They are user-representative messaging.","risk_type":"messaging_as_user","severity":"high","title":"Sends Slack/Teams messages and team alerts","triggering_tools_or_skills":["send_slack_message","send_microsoft_teams_message","alertTeam"]},{"evidence":"Explicit tools remove durable sales automation/content.","reasoning":"They can destroy shared operational knowledge.","risk_type":"data_deletion","severity":"high","title":"Deletes notes, scripts, skills and workflows","triggering_tools_or_skills":["deleteNote","deleteScript","deleteSkill","delete_workflow"]},{"evidence":"The tools control persistent sales automation/capture.","reasoning":"They affect live operations.","risk_type":"deployment_infrastructure","severity":"high","title":"Creates/runs/schedules event workflows and notetaker modes","triggering_tools_or_skills":["run_workflow","update_event_workflow","update_schedule_workflow","set_notetaker_mode"]},{"evidence":"Scripts/skills may execute within Taylor/Grw workflows.","reasoning":"The executable boundary requires runtime verification.","risk_type":"code_execution","severity":"high","title":"Creates/updates scripts/skills and runs workflows","triggering_tools_or_skills":["createScript","updateScript","createSkill","run_workflow"]},{"evidence":"The tool performs external retrieval without a documented allowlist.","reasoning":"It may access unintended destinations.","risk_type":"arbitrary_network_access","severity":"high","title":"Fetches caller-selected web resources","triggering_tools_or_skills":["web_fetch","web_search"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes CRM, Slack/Teams, notetaker, files and workflows.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/b533c519-cf4c-4ff2-8e91-743201d2f75e.json","what_it_proves":"Candidate PR #125 record identity (name \"Grw\", publisher, type web_connector) and 80 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/b533c519-cf4c-4ff2-8e91-743201d2f75e: complete tool_names inventory (80 tools), remote streamable-http endpoint https://app.grw.ai/api/mcp/v1, auth_posture auth_required, directory tier community"}],"primary_reason":"Grw can message teams, delete automation assets and run scripted workflows.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:b533c519-cf4c-4ff2-8e91-743201d2f75e","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 80 tools.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":80,"tools_or_skills_total":80},"name":"Grw","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=b533c519-cf4c-4ff2-8e91-743201d2f75e&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.grw.ai/legal/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Grw","publisher_url":"https://grw.ai/","remote_url":"https://app.grw.ai/api/mcp/v1","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: They are user-representative messaging.","evidence":"Sends Slack/Teams messages and team alerts: These tools communicate to coworkers as the connected user/agent.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Sends Slack/Teams messages and team alerts","triggering_tools":["send_slack_message","send_microsoft_teams_message","alertTeam"]},{"description":"This connector can permanently remove data or resources. Review findings: They can destroy shared operational knowledge.","evidence":"Deletes notes, scripts, skills and workflows: Explicit tools remove durable sales automation/content.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes notes, scripts, skills and workflows","triggering_tools":["deleteNote","deleteScript","deleteSkill","delete_workflow"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect live operations.","evidence":"Creates/runs/schedules event workflows and notetaker modes: The tools control persistent sales automation/capture.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Creates/runs/schedules event workflows and notetaker modes","triggering_tools":["run_workflow","update_event_workflow","update_schedule_workflow","set_notetaker_mode"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The executable boundary requires runtime verification.","evidence":"Creates/updates scripts/skills and runs workflows: Scripts/skills may execute within Taylor/Grw workflows.","manual_risk_type":"code_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Creates/updates scripts/skills and runs workflows","triggering_tools":["createScript","updateScript","createSkill","run_workflow"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: It may access unintended destinations.","evidence":"Fetches caller-selected web resources: The tool performs external retrieval without a documented allowlist.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"high","title":"Fetches caller-selected web resources","triggering_tools":["web_fetch","web_search"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hello@grw.ai","tags":["accesses_calendar","accesses_messaging","code_deployment","deletes_data","forwards_data_to_third_party","network_access","oauth_required","runs_code","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"alertTeam","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They are user-representative messaging."}},{"description":"","name":"ask_taylor"},{"description":"","name":"associate_crm_objects"},{"description":"","name":"createNote"},{"description":"","name":"createScript","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The executable boundary requires runtime verification."}},{"description":"","name":"createSkill","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The executable boundary requires runtime verification."}},{"description":"","name":"create_crm_object"},{"description":"","name":"create_notetaker_capture_clip"},{"description":"","name":"create_share_link"},{"description":"","name":"deleteNote","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy shared operational knowledge."}},{"description":"","name":"deleteScript","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy shared operational knowledge."}},{"description":"","name":"deleteSkill","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy shared operational knowledge."}},{"description":"","name":"delete_workflow","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy shared operational knowledge."}},{"description":"","name":"getCallRecordingLink"},{"description":"","name":"getNotes"},{"description":"","name":"getScript"},{"description":"","name":"getSkill"},{"description":"","name":"get_closed_performance"},{"description":"","name":"get_crm_accounts"},{"description":"","name":"get_crm_activity"},{"description":"","name":"get_crm_contacts"},{"description":"","name":"get_crm_deals"},{"description":"","name":"get_internal_file"},{"description":"","name":"get_notetaker_meetings_info"},{"description":"","name":"get_notetaker_transcripts"},{"description":"","name":"get_pipeline_analysis_methodology"},{"description":"","name":"get_pipeline_waterfall"},{"description":"","name":"get_recommended_workflow_example"},{"description":"","name":"get_slack_channel"},{"description":"","name":"get_stage_profile"},{"description":"","name":"get_taylor_response"},{"description":"","name":"get_workflow_run"},{"description":"","name":"get_workflows"},{"description":"","name":"listScripts"},{"description":"","name":"listSkills"},{"description":"","name":"list_chat_messages"},{"description":"","name":"list_crm_accounts"},{"description":"","name":"list_crm_activities"},{"description":"","name":"list_crm_contacts"},{"description":"","name":"list_crm_deals"},{"description":"","name":"list_crm_pipelines"},{"description":"","name":"list_crm_properties"},{"description":"","name":"list_integrations"},{"description":"","name":"list_internal_files"},{"description":"","name":"list_microsoft_teams_channels"},{"description":"","name":"list_microsoft_teams_users"},{"description":"","name":"list_notetaker_clips"},{"description":"","name":"list_notetaker_meetings"},{"description":"","name":"list_recommended_workflow_examples"},{"description":"","name":"list_slack_channels"},{"description":"","name":"list_workflow_runs"},{"description":"","name":"list_workflows"},{"description":"","name":"query_notetaker_transcripts"},{"description":"","name":"readCompanyFile"},{"description":"","name":"read_slack_channel"},{"description":"","name":"read_slack_thread"},{"description":"","name":"run_workflow","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The executable boundary requires runtime verification."}},{"description":"","name":"searchCompanyFiles"},{"description":"","name":"searchInsights"},{"description":"","name":"search_chat_history"},{"description":"","name":"search_crm_accounts"},{"description":"","name":"search_crm_contacts"},{"description":"","name":"search_crm_deals"},{"description":"","name":"search_notetaker_meetings"},{"description":"","name":"search_slack_channels"},{"description":"","name":"search_slack_users"},{"description":"","name":"send_microsoft_teams_message","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They are user-representative messaging."}},{"description":"","name":"send_slack_message","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They are user-representative messaging."}},{"description":"","name":"setNotetakerName"},{"description":"","name":"set_notetaker_mode","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect live operations."}},{"description":"","name":"updateNote"},{"description":"","name":"updateScript","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The executable boundary requires runtime verification."}},{"description":"","name":"updateSkill"},{"description":"","name":"update_crm_account"},{"description":"","name":"update_crm_contact"},{"description":"","name":"update_crm_deal"},{"description":"","name":"update_event_workflow","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect live operations."}},{"description":"","name":"update_schedule_workflow","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect live operations."}},{"description":"","name":"web_fetch"},{"description":"","name":"web_search"}],"tools_count":80,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/b533c519-cf4c-4ff2-8e91-743201d2f75e","uuid":"5e7ab1db-9538-5280-8c7f-1c5ea8349fa5","verification_tier":"community","version":""},"query_key":"grw grw","schema_version":1,"status":"match"}