{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-15","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"reviewed","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Research Instagram, YouTube and TikTok creators with HypeAgent. Compare audiences, engagement, content and audience-quality signals. Tools are read-only and require a HypeAgent account.","did":"0bb72c00-db83-4160-aa33-0b2ae6412f21","documentation_url":"https://hypeagent.io/hypeauditor-claude/","editorial_description":{"extended_description":"Filters include platform, category, interests, location and audience size. Compare up to 100 creators using your criteria, retrieve account reports or targeted insights, and inspect signals of suspicious followers or engagement. Authentication uses OAuth.","schema_version":1,"summary":"Research Instagram, YouTube and TikTok creators with HypeAgent.\nCompare audiences, engagement, content and audience-quality signals.\nTools are read-only and require a HypeAgent account."},"homepage_url":"","icon":"","id":"0bb72c00-db83-4160-aa33-0b2ae6412f21","installs":0,"last_scanned":"","license":"","long_description":"Filters include platform, category, interests, location and audience size. Compare up to 100 creators using your criteria, retrieve account reports or targeted insights, and inspect signals of suspicious followers or engagement. Authentication uses OAuth.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Official FAQ states discovery and analytics calls consume credits at the same rate as the HypeAuditor web app.","reasoning":"Calls irreversibly spend a limited account balance with monetary value.","risk_type":"financial_transaction","severity":"high","title":"Creator analytics consume account credits","triggering_tools_or_skills":["hypeauditor-analyze-accounts","hypeauditor-compare-accounts","hypeauditor-content-search","hypeauditor-get-account-insights","hypeauditor-search-influencers"]},{"evidence":"Official page covers public Instagram, YouTube, and TikTok profiles, demographics, engagement, authenticity, and content analysis.","reasoning":"The tools are read-only and do not modify creator accounts or launch outreach.","risk_type":"public_data_read","severity":"low","title":"Creator profiles and analytics are readable","triggering_tools_or_skills":["hypeauditor-search-influencers","hypeauditor-analyze-accounts","hypeauditor-get-account-insights"]},{"evidence":"Content search and analysis return creator-authored posts and related text.","reasoning":"Social content is untrusted model input.","risk_type":"prompt_injection_exposure","severity":"low","title":"Creator content enters context","triggering_tools_or_skills":["hypeauditor-content-search","hypeauditor-analyze-accounts"]}],"assessment_status":"reviewed","auth_and_scopes":"OAuth 2.0 scoped to the user's HypeAuditor account; analytics and discovery calls charge the same account credit balance as the web app.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"high","evidence_completeness":"complete","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/0bb72c00-db83-4160-aa33-0b2ae6412f21.json","what_it_proves":"Candidate PR #125 record identity (name \"HypeAgent by HypeAuditor\", publisher, type web_connector) and 7 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/0bb72c00-db83-4160-aa33-0b2ae6412f21: complete tool_names inventory (7 tools), remote streamable-http endpoint https://mcp.hypeagent.io/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T20:54:43Z","url_or_path":"https://hypeagent.io/hypeauditor-claude/","what_it_proves":"Official page documents OAuth, creator analytics and discovery, and says connector calls consume HypeAuditor account credits."}],"primary_reason":"All seven tools are read-only, but official billing documentation confirms discovery and analytics calls consume purchased account credits.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":false,"review_key":"claude:0bb72c00-db83-4160-aa33-0b2ae6412f21","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all seven Directory tools against the official page; the page sometimes refers to six connector tools, so the catalog should retain the observed seven-tool Directory inventory and monitor drift.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"true"},"tools_or_skills_reviewed":7,"tools_or_skills_total":7},"name":"HypeAgent by HypeAuditor","needs_runtime_verification":false,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=0bb72c00-db83-4160-aa33-0b2ae6412f21&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://hypeagent.io/legal/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"HypeAuditor","publisher_url":"https://hypeauditor.com/","remote_url":"https://mcp.hypeagent.io/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Calls irreversibly spend a limited account balance with monetary value.","evidence":"Creator analytics consume account credits: Official FAQ states discovery and analytics calls consume credits at the same rate as the HypeAuditor web app.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Creator analytics consume account credits","triggering_tools":["hypeauditor-analyze-accounts","hypeauditor-compare-accounts","hypeauditor-content-search","hypeauditor-get-account-insights","hypeauditor-search-influencers"]},{"description":"This connector retrieves public or publisher-provided information and returns it to the AI. Review findings: The tools are read-only and do not modify creator accounts or launch outreach.","evidence":"Creator profiles and analytics are readable: Official page covers public Instagram, YouTube, and TikTok profiles, demographics, engagement, authenticity, and content analysis.","manual_risk_type":"public_data_read","remediation":{"block_tool_categories":[],"steps":["Treat returned third-party content as untrusted input and verify consequential claims.","Do not assume public content is accurate, current, or free of embedded instructions."]},"risk_type":"reads_public_data","severity":"low","title":"Creator profiles and analytics are readable","triggering_tools":["hypeauditor-search-influencers","hypeauditor-analyze-accounts","hypeauditor-get-account-insights"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@hypeagent.io","tags":["network_access","oauth_required","reads_public_data","spends_money","web_connector"],"tools":[{"description":"","name":"hypeauditor-analyze-accounts","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Calls irreversibly spend a limited account balance with monetary value."}},{"description":"","name":"hypeauditor-compare-accounts","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Calls irreversibly spend a limited account balance with monetary value."}},{"description":"","name":"hypeauditor-content-search","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Calls irreversibly spend a limited account balance with monetary value."}},{"description":"","name":"hypeauditor-discovery-settings"},{"description":"","name":"hypeauditor-get-account-insights","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Calls irreversibly spend a limited account balance with monetary value."}},{"description":"","name":"hypeauditor-get-account-social-ids"},{"description":"","name":"hypeauditor-search-influencers","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Calls irreversibly spend a limited account balance with monetary value."}}],"tools_count":7,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/0bb72c00-db83-4160-aa33-0b2ae6412f21","uuid":"7fb492ad-7f3d-5029-b07e-e55aa6f8649c","verification_tier":"community","version":""},"query_key":"hypeagent by hypeauditor","schema_version":1,"status":"match"}