{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-19","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Pile Capacity estimates axial bearing, uplift capacity, and required pile length. Preview soil and pile inputs with assumptions, confirm them, then run analysis or export reports. A hetGE account with an active Pile Capacity license is required.","did":"7ebd3977-05a9-4ec2-a052-8ae09183625f","documentation_url":"https://capacity.hetge.com/connect","editorial_description":{"extended_description":"Analyze cast-in-situ bored and CFA piles using SI or US customary units. Results include capacities, toe levels, factors, and per-layer calculations; export PDF or formula-based Excel reports and save designs to projects.","schema_version":1,"summary":"Pile Capacity estimates axial bearing, uplift capacity, and required pile length.\nPreview soil and pile inputs with assumptions, confirm them, then run analysis or export reports.\nA hetGE account with an active Pile Capacity license is required."},"homepage_url":"","icon":"https://capacity.hetge.com/icon-512.png","id":"7ebd3977-05a9-4ec2-a052-8ae09183625f","installs":0,"last_scanned":"","license":"","long_description":"Analyze cast-in-situ bored and CFA piles using SI or US customary units. Results include capacities, toe levels, factors, and per-layer calculations; export PDF or formula-based Excel reports and save designs to projects.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The tool persists a confirmed pile-capacity design into a user project.","reasoning":"It creates durable engineering data in the authenticated account.","risk_type":"data_modification","severity":"medium","title":"Saves engineering designs into account projects","triggering_tools_or_skills":["save_design"]},{"evidence":"The Directory description says reports can be rendered as PDF or Excel workbooks.","reasoning":"Generating downloadable engineering reports is a file-producing action.","risk_type":"file_write","severity":"medium","title":"Renders calculation reports as files","triggering_tools_or_skills":["render_report"]},{"evidence":"The connector processes project ground conditions, loads, assumptions and designs.","reasoning":"These are private engineering/project inputs and results.","risk_type":"private_data_read","severity":"low","title":"Analyzes private soil profiles and pile schedules","triggering_tools_or_skills":["preview_design","run_analysis","list_projects"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth to a licensed hetGE Pile Capacity account is required; project/design access follows that account, but exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/7ebd3977-05a9-4ec2-a052-8ae09183625f.json","what_it_proves":"Candidate PR #125 record identity (name \"Pile Capacity\", publisher, type web_connector) and 5 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/7ebd3977-05a9-4ec2-a052-8ae09183625f: complete tool_names inventory (5 tools), remote streamable-http endpoint https://capacity.hetge.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Pile Capacity persists engineering designs and generates PDF/Excel reports.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:7ebd3977-05a9-4ec2-a052-8ae09183625f","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all five tools. The documentation URL was inaccessible in the lookup; tool descriptions/schemas, report storage semantics and project authorization should be checked at runtime.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":5,"tools_or_skills_total":5},"name":"Pile Capacity","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=7ebd3977-05a9-4ec2-a052-8ae09183625f&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://capacity.hetge.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"hetGE","publisher_url":"https://hetge.com/","remote_url":"https://capacity.hetge.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It creates durable engineering data in the authenticated account.","evidence":"Saves engineering designs into account projects: The tool persists a confirmed pile-capacity design into a user project.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Saves engineering designs into account projects","triggering_tools":["save_design"]},{"description":"This connector can create, change, export, or otherwise write files. Review findings: Generating downloadable engineering reports is a file-producing action.","evidence":"Renders calculation reports as files: The Directory description says reports can be rendered as PDF or Excel workbooks.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Renders calculation reports as files","triggering_tools":["render_report"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: These are private engineering/project inputs and results.","evidence":"Analyzes private soil profiles and pile schedules: The connector processes project ground conditions, loads, assumptions and designs.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Analyzes private soil profiles and pile schedules","triggering_tools":["preview_design","run_analysis","list_projects"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://hetge.com/support","tags":["filesystem_access","modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"list_projects"},{"description":"","name":"preview_design"},{"description":"","name":"render_report","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: Generating downloadable engineering reports is a file-producing action."}},{"description":"","name":"run_analysis"},{"description":"","name":"save_design","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It creates durable engineering data in the authenticated account."}}],"tools_count":5,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/7ebd3977-05a9-4ec2-a052-8ae09183625f","uuid":"e2db95d9-eb05-5cb7-932d-6294096c51d9","verification_tier":"community","version":""},"query_key":"hetge pile capacity","schema_version":1,"status":"match"}
