{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-20","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Limonene investigates Amazon sales, inventory, Buy Box observations, and fees. Review store or SKU evidence through six read-only tools. An account and synchronized store are required; authorization covers one store and marketplace.","did":"83ed519d-3584-4ac6-b496-363ece89298a","documentation_url":"https://limonene.app/connect-ai","editorial_description":{"extended_description":"Missing data is not zero, and revenue after Amazon fees is not net profit. Available evidence depends on the store connection. This connector cannot change prices, listings, or ads or export buyer contacts; separately consented management is outside its scope.","schema_version":1,"summary":"Limonene investigates Amazon sales, inventory, Buy Box observations, and fees.\nReview store or SKU evidence through six read-only tools.\nAn account and synchronized store are required; authorization covers one store and marketplace."},"homepage_url":"","icon":"","id":"83ed519d-3584-4ac6-b496-363ece89298a","installs":0,"last_scanned":"","license":"","long_description":"Missing data is not zero, and revenue after Amazon fees is not net profit. Available evidence depends on the store connection. This connector cannot change prices, listings, or ads or export buyer contacts; separately consented management is outside its scope.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"Official docs say the same connector can expose tools that change prices, repricing rules, listings and scheduled actions after approval.","reasoning":"Those are meaningful persistent commerce/catalog changes even though the six Directory names are read-only.","risk_type":"data_modification","severity":"medium","title":"Optional management scope changes Amazon store state","triggering_tools_or_skills":[]},{"evidence":"The packet contains six investigation tools and says management is not part of the submission, while current official docs advertise up to 57 tools on the same connector based on chosen scope.","reasoning":"The published inventory no longer represents the union of actions users can authorize.","risk_type":"identity_discrepancy","severity":"low","title":"Directory inventory omits the current management tool surface","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth selects one Amazon store/marketplace; the Directory submission describes read-only scope, while current official docs allow a separate Pro Read-and-manage scope after preview/approval.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/83ed519d-3584-4ac6-b496-363ece89298a.json","what_it_proves":"Candidate PR #125 record identity (name \"Limonene\", publisher, type web_connector) and 6 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/83ed519d-3584-4ac6-b496-363ece89298a: complete tool_names inventory (6 tools), remote streamable-http endpoint https://limonene.app/api/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:17:31Z","url_or_path":"https://limonene.app/connect-ai","what_it_proves":"Official connection page says the initial six tools are read-only, but the same connector now offers optional Read and manage access with up to 57 tools for price, repricing-rule, listing and scheduled-action changes."}],"primary_reason":"Limonene’s submitted six-tool surface is read-only, but the same connector now dynamically exposes Amazon management actions.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:83ed519d-3584-4ac6-b496-363ece89298a","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all six Directory tools and current official connection docs. Management tools were not individually named on the opened page, so the record must refresh tools/list and scope metadata before publication; no ad changes or paid reimbursement filing are documented.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":6,"tools_or_skills_total":6},"name":"Limonene","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=83ed519d-3584-4ac6-b496-363ece89298a&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://limonene.app/privacy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Zed Axis Systems LLC","publisher_url":"https://limonene.app/","remote_url":"https://limonene.app/api/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Those are meaningful persistent commerce/catalog changes even though the six Directory names are read-only.","evidence":"Optional management scope changes Amazon store state: Official docs say the same connector can expose tools that change prices, repricing rules, listings and scheduled actions after approval.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Optional management scope changes Amazon store state","triggering_tools":[]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hello@limonene.app","tags":["modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"get_inventory_health"},{"description":"","name":"get_open_insights"},{"description":"","name":"get_pricing_and_buybox"},{"description":"","name":"get_profit_breakdown"},{"description":"","name":"get_sales_trend"},{"description":"","name":"get_store_overview"}],"tools_count":6,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/83ed519d-3584-4ac6-b496-363ece89298a","uuid":"8a74d449-a652-5005-a357-7c88ea37312d","verification_tier":"community","version":""},"query_key":"limonene","schema_version":1,"status":"match"}