{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-21","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"no_auth","category":"Web Connector","confidence":"medium","description":"hacesfalta finds volunteering opportunities across Spain. Filter by province, category, age, schedule, and participation preferences. The connector is read-only; registration stays on hacesfalta.org.","did":"94bedef4-c6f3-4076-babf-f331dac5c306","documentation_url":"https://github.com/HazloPosible/hacesfalta-mcp","editorial_description":{"extended_description":"Opportunity details include requested profiles, dates, skills, Sustainable Development Goals, and an official registration link. Browse active provinces and categories, including family, group, and weekend opportunities. No authentication is required to use the connector.","schema_version":1,"summary":"hacesfalta finds volunteering opportunities across Spain.\nFilter by province, category, age, schedule, and participation preferences.\nThe connector is read-only; registration stays on hacesfalta.org."},"homepage_url":"","icon":"https://www.hacesfalta.org/images/favicon-HF.png","id":"94bedef4-c6f3-4076-babf-f331dac5c306","installs":0,"last_scanned":"","license":"","long_description":"Opportunity details include requested profiles, dates, skills, Sustainable Development Goals, and an official registration link. Browse active provinces and categories, including family, group, and weekend opportunities. No authentication is required to use the connector.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"All four tools are read-only discovery; applications remain on the official platform.","reasoning":"They do not submit an application or contact an NGO.","risk_type":"public_data_read","severity":"low","title":"Searches public Spanish volunteer opportunities","triggering_tools_or_skills":["buscar_oportunidades","detalle_oportunidad","listar_categorias","listar_provincias"]}],"assessment_status":"provisional","auth_and_scopes":"No authentication is required; tools retrieve public volunteer opportunities from hacesfalta.org.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/94bedef4-c6f3-4076-babf-f331dac5c306.json","what_it_proves":"Candidate PR #125 record identity (name \"hacesfalta\", publisher, type web_connector) and 4 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/94bedef4-c6f3-4076-babf-f331dac5c306: complete tool_names inventory (4 tools), remote streamable-http endpoint https://hacesfalta-mcp.hacesfalta.workers.dev/mcp, auth_posture no_auth, directory tier community"}],"primary_reason":"hacesfalta exposes four public read-only volunteer-search tools.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:94bedef4-c6f3-4076-babf-f331dac5c306","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all four tools and explicit no-application boundary.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"false","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":4,"tools_or_skills_total":4},"name":"hacesfalta","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=94bedef4-c6f3-4076-babf-f331dac5c306&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.hacesfalta.org/Contenido/?idPagina=1471","provisional_risk":null,"publication_recommendation":"accept","publisher":"Fundación HazloPosible","publisher_url":"https://hacesfalta.org/","remote_url":"https://hacesfalta-mcp.hacesfalta.workers.dev/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector retrieves public or publisher-provided information and returns it to the AI. Review findings: They do not submit an application or contact an NGO.","evidence":"Searches public Spanish volunteer opportunities: All four tools are read-only discovery; applications remain on the official platform.","manual_risk_type":"public_data_read","remediation":{"block_tool_categories":[],"steps":["Treat returned third-party content as untrusted input and verify consequential claims.","Do not assume public content is accurate, current, or free of embedded instructions."]},"risk_type":"reads_public_data","severity":"low","title":"Searches public Spanish volunteer opportunities","triggering_tools":["buscar_oportunidades","detalle_oportunidad","listar_categorias","listar_provincias"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://www.hacesfalta.org/preguntas-frecuentes.ct","tags":["network_access","reads_public_data","web_connector"],"tools":[{"description":"","name":"buscar_oportunidades"},{"description":"","name":"detalle_oportunidad"},{"description":"","name":"listar_categorias"},{"description":"","name":"listar_provincias"}],"tools_count":4,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/94bedef4-c6f3-4076-babf-f331dac5c306","uuid":"8229d344-1de8-53a5-8da0-90a54680f65a","verification_tier":"community","version":""},"query_key":"hacesfalta","schema_version":1,"status":"match"}