{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-18","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Analyze your YouTube channel and plan content with Klyf. Review audience behavior, video performance, comments and discoverability. Develop ideas, scripts and packaging, or reply to comments through supported tools.","did":"ccb54f80-e6cd-46bc-a732-2a9dc4caca8f","documentation_url":"https://klyf.ai/how-to-use","editorial_description":{"extended_description":"Channel audits and video diagnostics help identify topics or underperforming content to investigate. Tools can draft descriptions, compare strong videos or thumbnails, review upcoming uploads and provide weekly digests. Comment features include reading threads, replying and enabling automatic replies.","schema_version":1,"summary":"Analyze your YouTube channel and plan content with Klyf.\nReview audience behavior, video performance, comments and discoverability.\nDevelop ideas, scripts and packaging, or reply to comments through supported tools."},"homepage_url":"","icon":"","id":"ccb54f80-e6cd-46bc-a732-2a9dc4caca8f","installs":0,"last_scanned":"","license":"","long_description":"Channel audits and video diagnostics help identify topics or underperforming content to investigate. Tools can draft descriptions, compare strong videos or thumbnails, review upcoming uploads and provide weekly digests. Comment features include reading threads, replying and enabling automatic replies.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly contains reply_to_comment and enable_auto_reply.","reasoning":"Posting comments publicly as the channel owner, including future automatic replies, is High messaging.","risk_type":"messaging_as_user","severity":"high","title":"YouTube comments can be replied to and automatic replies enabled","triggering_tools_or_skills":["reply_to_comment","enable_auto_reply"]},{"evidence":"The inventory includes content-generation tools tied to channel workflow.","reasoning":"These at least create internal draft artifacts, though publishing is not declared.","risk_type":"data_modification","severity":"medium","title":"Scripts, descriptions and video packages can be drafted","triggering_tools_or_skills":["draft_description","draft_script","package_video"]},{"evidence":"The connector runs at https://klyf.ai/api/mcp without a pinned server implementation in the packet.","reasoning":"The hosted implementation can change independently of this catalog snapshot, requiring runtime verification and change monitoring.","risk_type":"provenance_uncertainty","severity":"low","title":"Klyf is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication connects the user's YouTube channel; exact OAuth scopes and auto-reply safeguards are not published.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/ccb54f80-e6cd-46bc-a732-2a9dc4caca8f.json","what_it_proves":"Candidate PR #125 record identity (name \"Klyf\", publisher, type web_connector) and 21 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/ccb54f80-e6cd-46bc-a732-2a9dc4caca8f: complete tool_names inventory (21 tools), remote streamable-http endpoint https://klyf.ai/api/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Klyf can reply publicly to YouTube comments and enable automatic replies.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:ccb54f80-e6cd-46bc-a732-2a9dc4caca8f","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 21 tools. The High external communication action is unambiguous from names; recipient/content controls require runtime verification.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":21,"tools_or_skills_total":21},"name":"Klyf","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=ccb54f80-e6cd-46bc-a732-2a9dc4caca8f&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://klyf.ai/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Klyf","publisher_url":"https://klyf.ai/","remote_url":"https://klyf.ai/api/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Posting comments publicly as the channel owner, including future automatic replies, is High messaging.","evidence":"YouTube comments can be replied to and automatic replies enabled: The complete inventory explicitly contains reply_to_comment and enable_auto_reply.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"YouTube comments can be replied to and automatic replies enabled","triggering_tools":["reply_to_comment","enable_auto_reply"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These at least create internal draft artifacts, though publishing is not declared.","evidence":"Scripts, descriptions and video packages can be drafted: The inventory includes content-generation tools tied to channel workflow.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Scripts, descriptions and video packages can be drafted","triggering_tools":["draft_description","draft_script","package_video"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hello@klyf.ai","tags":["accesses_messaging","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"analyze_audience"},{"description":"","name":"analyze_video"},{"description":"","name":"audit_channel"},{"description":"","name":"check_discoverability"},{"description":"","name":"check_growth"},{"description":"","name":"diagnose_channel"},{"description":"","name":"draft_description","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These at least create internal draft artifacts, though publishing is not declared."}},{"description":"","name":"draft_script","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These at least create internal draft artifacts, though publishing is not declared."}},{"description":"","name":"enable_auto_reply","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Posting comments publicly as the channel owner, including future automatic replies, is High messaging."}},{"description":"","name":"evaluate_idea"},{"description":"","name":"find_best_thumbnails"},{"description":"","name":"find_best_videos"},{"description":"","name":"get_weekly_digest"},{"description":"","name":"package_video","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These at least create internal draft artifacts, though publishing is not declared."}},{"description":"","name":"read_comment_thread"},{"description":"","name":"read_comments"},{"description":"","name":"reply_to_comment","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Posting comments publicly as the channel owner, including future automatic replies, is High messaging."}},{"description":"","name":"review_upcoming_video"},{"description":"","name":"submit_feedback"},{"description":"","name":"suggest_ideas"},{"description":"","name":"upgrade_to_pro"}],"tools_count":21,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/ccb54f80-e6cd-46bc-a732-2a9dc4caca8f","uuid":"a0e6057e-9fb6-5210-8cbb-6d4c3212cbde","verification_tier":"community","version":""},"query_key":"klyf klyf","schema_version":1,"status":"match"}