{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-24","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","catalog_reconciliation":{"basis":"Documented actions on the identified catalog surface; not an execution test.","confidence":"medium","evidence_completeness":"partial","previous":{"confidence":"low","detail_sha256":"e0b97672fa439f2d0379b9cc4a7e991f8c1a433a72100fb95759fb563ff6eccd","risk":"high"},"proposal_file":"parent-proposals.json","rationale":"First pass High; current High. The MCP Tools Reference (not in the prior packet) documents act/batch_act as immediate state-changing actions on the live, logged-in page (click, type, select, navigate, open URL, submit) and itself warns that financial transactions, deletions and account changes are irreversible. No per-site allowlist; approval gate only when 'the session's posture requires it'. This evidences consequential execution across arbitrary authenticated sites, so High is supported, but the only visible browser card is Medium. Keep High and raise/add the browser-action card to High; the prior 'unassessed/provisional' status can be resolved to High on documentary evidence.","review_key":"claudesec:ce7d7315-f950-4d87-9cba-a74a4b9c9c6d","reviewed_at":"2026-10-12","runtime_verified":false,"sources":["https://e2llm.com/docs/mcp-tools/","https://e2llm.com/docs/setup/"],"status":"resolved"},"category":"Web Connector","confidence":"low","description":"Connect Claude to your real browser with the E2LLM extension. Read structured page content and act on tabs with clicks or typing. Actions use per-action permission grants that you approve.","did":"ce7d7315-f950-4d87-9cba-a74a4b9c9c6d","documentation_url":"https://e2llm.com/docs/setup/","editorial_description":{"extended_description":"The connection works with the sites and logged-in sessions already open in your browser. Install the extension and connect your account; a free tier is available, with higher usage limits on Pro.","schema_version":1,"summary":"Connect Claude to your real browser with the E2LLM extension.\nRead structured page content and act on tabs with clicks or typing.\nActions use per-action permission grants that you approve."},"homepage_url":"","icon":"","id":"ce7d7315-f950-4d87-9cba-a74a4b9c9c6d","installs":0,"last_scanned":"","license":"","long_description":"The connection works with the sites and logged-in sessions already open in your browser. Install the extension and connect your account; a free tier is available, with higher usage limits on Pro.","manual_assessment":"unassessed","manual_review":{"all_findings":[{"evidence":"Official setup docs say the AI can open any site, click controls, fill fields and act through the browser extension.","reasoning":"Browser control is at least Medium and can expose authenticated page state.","risk_type":"browser_control","severity":"medium","title":"The connector clicks and types in the logged-in browser","triggering_tools_or_skills":["act","batch_act","close_tab"]},{"evidence":"No action schema or enforced allowlist is present in the packet; docs explicitly warn custom connectors can modify or erase data.","reasoning":"High-impact sends, purchases, deletion or admin actions may be reachable through websites, but no specific High action is verified, so provisional High is conservative.","risk_type":"generic_gateway","severity":"low","title":"Generic browser actions can reach unspecified site capabilities","triggering_tools_or_skills":["act","batch_act"]},{"evidence":"The connector runs at https://mcp.e2llm.com/mcp without a pinned server implementation in the packet.","reasoning":"The hosted implementation can change independently of this snapshot, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"e2llm is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth links an E2LLM account and browser extension; the listing says per-action permission grants, but exact enforcement and site/action restrictions are not documented.","blocked_missing_evidence":"Full act and batch_act action schemas, permitted browser operations, confirmation enforcement, and evidence showing whether navigation/submission on logged-in sites is restricted.","confidence":"low","displayed_risk":"high","evidence_completeness":"insufficient","manual_overall_risk":"unassessed","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/ce7d7315-f950-4d87-9cba-a74a4b9c9c6d.json","what_it_proves":"Candidate PR #125 record identity (name \"e2llm\", publisher, type web_connector) and 9 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/ce7d7315-f950-4d87-9cba-a74a4b9c9c6d: complete tool_names inventory (9 tools), remote streamable-http endpoint https://mcp.e2llm.com/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:04:12Z","url_or_path":"https://e2llm.com/docs/setup/","what_it_proves":"E2LLM documents arbitrary-site page capture and browser clicks/form filling through the extension, and notes elevated risk because connectors may modify or erase data."}],"primary_reason":"e2llm controls logged-in browser pages through a generic action gateway whose reachable high-impact operations are not bounded.","provisional_risk":"high","publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:ce7d7315-f950-4d87-9cba-a74a4b9c9c6d","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 9 tools and official setup guide. Do not publish a definitive safe rating until action schemas and permission enforcement are independently verified.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"true","credential_or_admin_actions":"unknown","deletes_data":"unknown","deployment_or_infrastructure":"unknown","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"unknown","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"unknown","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":9,"tools_or_skills_total":9},"name":"e2llm","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=ce7d7315-f950-4d87-9cba-a74a4b9c9c6d&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://e2llm.com/privacy/","provisional_risk":"high","publication_recommendation":"fix","publisher":"insitu.im","publisher_url":"https://insitu.im/","remote_url":"https://mcp.e2llm.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"The act and batch_act tools can click, type, navigate and submit forms on live pages. In authenticated sessions these actions can make purchases, send information, delete records or change account settings; approval depends on the session posture.","evidence":"https://e2llm.com/docs/mcp-tools/\nAction tools section: act, batch_act (submit), irreversibility warning\n\nhttps://e2llm.com/docs/setup/\nexample prompts: click, fill fields","risk_type":"browser_control","severity":"high","title":"Acts in your signed-in browser sessions"},{"description":"The connector can retrieve page content from tabs, including private information in signed-in websites.","evidence":"https://e2llm.com/docs/mcp-tools/\nPerception tools section","risk_type":"reads_private_data","severity":"medium","title":"Reads content from open browser tabs"}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"info@e2llm.com","tags":["browser_control","reads_private_data"],"tools":[{"description":"","name":"act","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can navigate pages and interact with browser content on the user's behalf. Review findings: Browser control is at least Medium and can expose authenticated page state."}},{"description":"","name":"batch_act","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can navigate pages and interact with browser content on the user's behalf. Review findings: Browser control is at least Medium and can expose authenticated page state."}},{"description":"","name":"close_tab","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can navigate pages and interact with browser content on the user's behalf. Review findings: Browser control is at least Medium and can expose authenticated page state."}},{"description":"","name":"explore"},{"description":"","name":"inspect"},{"description":"","name":"list_tabs"},{"description":"","name":"query"},{"description":"","name":"read_page"},{"description":"","name":"sifr_capture"}],"tools_count":9,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/ce7d7315-f950-4d87-9cba-a74a4b9c9c6d","uuid":"65cfa93d-7927-5a64-855a-eba090f25745","verification_tier":"community","version":""},"query_key":"insitu im e2llm","schema_version":1,"status":"match"}