{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-23","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"IBI SMART retrieves your account portfolio for review. Use it to inspect holdings associated with Israeli and U.S. market activity. Information may be incomplete or inaccurate and is not investment advice or a transaction recommendation.","did":"a91d4b5e-dadd-4405-bc42-056364af97f3","documentation_url":"https://www.ibi.co.il/","editorial_description":{"extended_description":"","schema_version":1,"summary":"IBI SMART retrieves your account portfolio for review.\nUse it to inspect holdings associated with Israeli and U.S. market activity.\nInformation may be incomplete or inaccurate and is not investment advice or a transaction recommendation."},"homepage_url":"","icon":"https://tradingil.co.il/wp-content/uploads/2023/09/%D7%9C%D7%95%D7%92%D7%95-%D7%9B%D7%97%D7%95%D7%9C-768x558.png","id":"a91d4b5e-dadd-4405-bc42-056364af97f3","installs":0,"last_scanned":"","license":"","long_description":"","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"The sole tool retrieves account portfolio data.","reasoning":"It cannot place trades or transfer funds.","risk_type":"private_data_read","severity":"low","title":"Reads private investment portfolio information","triggering_tools_or_skills":["get_account_portfolio"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes the user’s IBI SMART portfolio.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/a91d4b5e-dadd-4405-bc42-056364af97f3.json","what_it_proves":"Candidate PR #125 record identity (name \"IBI SMART\", publisher, type web_connector) and 1 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/a91d4b5e-dadd-4405-bc42-056364af97f3: complete tool_names inventory (1 tools), remote streamable-http endpoint https://smartapi.ibi.co.il/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"IBI SMART is read-only portfolio retrieval.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:a91d4b5e-dadd-4405-bc42-056364af97f3","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed the sole tool; informational disclaimer aligns with inventory.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":1,"tools_or_skills_total":1},"name":"IBI SMART","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=a91d4b5e-dadd-4405-bc42-056364af97f3&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.ibi.co.il/privacy-policy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"IBI SMART","publisher_url":"https://www.ibi.co.il/","remote_url":"https://smartapi.ibi.co.il/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: It cannot place trades or transfer funds.","evidence":"Reads private investment portfolio information: The sole tool retrieves account portfolio data.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads private investment portfolio information","triggering_tools":["get_account_portfolio"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://www.ibi.co.il","tags":["network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"get_account_portfolio"}],"tools_count":1,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/a91d4b5e-dadd-4405-bc42-056364af97f3","uuid":"98734d5e-54ab-513c-bc35-0ec08095632e","verification_tier":"community","version":""},"query_key":"ibi smart","schema_version":1,"status":"match"}