{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-31","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","catalog_reconciliation":{"basis":"Documented actions on the identified catalog surface; not an execution test.","confidence":"high","evidence_completeness":"partial","previous":{"confidence":"low","detail_sha256":"ec2b4e981f7fcb7dabf2b878184177fd5211ac5c77255c32e9f6892492502d4d","risk":"high"},"proposal_file":"claude-tail-proposals.json","rationale":"High is justified but no visible card is High. Markifact operation docs exposed through run_write_operation include Google Ads Update Campaign Budget, Update Campaign Status, Update Keyword Bid and Create Campaign (daily_budget required), plus equivalents across Meta/TikTok/LinkedIn etc. and Slack/social posting. Changing live ad budgets/status is financially consequential spend across connected ad accounts.","review_key":"claudesec:d6de6849-5038-4932-a859-74b92ba2fe83","reviewed_at":"2026-10-12","runtime_verified":false,"sources":["https://docs.markifact.com/","https://docs.markifact.com/nodes/gads/gads_custom_app","https://docs.markifact.com/nodes/gads/gads_create_campaign","https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community"],"status":"resolved"},"category":"Interactive Connector","confidence":"low","description":"Analyze and manage connected marketing platforms with Markifact. Combine advertising reports, audit campaigns, and inspect budgets, keywords, audiences, or conversions. Create ads, adjust supported campaign settings, and send results to connected reporting tools.","did":"d6de6849-5038-4932-a859-74b92ba2fe83","documentation_url":"https://docs.markifact.com/","editorial_description":{"extended_description":"Discover operations and input requirements across advertising, analytics, ecommerce, CRM, workspace, and social integrations. Separate read and write execution tools support account-specific actions, with media preparation and upload for creatives.","schema_version":1,"summary":"Analyze and manage connected marketing platforms with Markifact.\nCombine advertising reports, audit campaigns, and inspect budgets, keywords, audiences, or conversions.\nCreate ads, adjust supported campaign settings, and send results to connected reporting tools."},"homepage_url":"","icon":"","id":"d6de6849-5038-4932-a859-74b92ba2fe83","installs":0,"last_scanned":"","license":"","long_description":"Discover operations and input requirements across advertising, analytics, ecommerce, CRM, workspace, and social integrations. Separate read and write execution tools support account-specific actions, with media preparation and upload for creatives.","manual_assessment":"unassessed","manual_review":{"all_findings":[{"evidence":"The connector discovers operations and invokes arbitrary selected read/write operations across ads, CRM, ecommerce and Google Workspace, but the packet contains no downstream inventory.","reasoning":"Campaign spending, sends, deletion, administration and production writes may be reachable and cannot be bounded; these impacts are potential rather than verified.","risk_type":"generic_gateway","severity":"medium","title":"Dynamic write operations can reach an undisclosed cross-platform action set","triggering_tools_or_skills":["find_operations","get_operation_inputs","run_operation","run_write_operation"]},{"evidence":"The top-level inventory directly exposes file access and upload.","reasoning":"This can move user files into connected services.","risk_type":"file_write","severity":"medium","title":"Files and media can be read or uploaded","triggering_tools_or_skills":["read_file","prepare_media_upload","upload_media"]},{"evidence":"The gateway returns mutable third-party/business content.","reasoning":"Returned data must remain untrusted.","risk_type":"prompt_injection_exposure","severity":"low","title":"Connected-platform data and files enter model context","triggering_tools_or_skills":["run_operation","read_file"]},{"evidence":"The connector runs at https://api.markifact.com/mcp without a pinned server implementation in the packet.","reasoning":"The implementation can change independently, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Markifact is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication links many advertising, analytics, ecommerce, CRM and Google Workspace connections; per-operation scopes are not supplied.","blocked_missing_evidence":"A complete discovered-operation inventory with input schemas, connected-platform scopes, confirmation requirements and evidence for spend/send/delete/admin boundaries.","confidence":"low","displayed_risk":"high","evidence_completeness":"insufficient","manual_overall_risk":"unassessed","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/d6de6849-5038-4932-a859-74b92ba2fe83.json","what_it_proves":"Candidate PR #125 record identity (name \"Markifact\", publisher, type interactive_connector) and 10 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/d6de6849-5038-4932-a859-74b92ba2fe83: complete tool_names inventory (10 tools), remote streamable-http endpoint https://api.markifact.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Markifact exposes a generic cross-platform write-operation gateway whose high-impact actions are not enumerated.","provisional_risk":"high","publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:d6de6849-5038-4932-a859-74b92ba2fe83","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 10 top-level tools. Do not publish a definitive safety claim until run_write_operation is fully enumerated.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"unknown","deletes_data":"unknown","deployment_or_infrastructure":"unknown","dynamic_hidden_actions":"true","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"unknown","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"unknown","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":10,"tools_or_skills_total":10},"name":"Markifact","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=d6de6849-5038-4932-a859-74b92ba2fe83&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.markifact.com/privacy-policy","provisional_risk":"high","publication_recommendation":"fix","publisher":"Markifact","publisher_url":"https://www.markifact.com/","remote_url":"https://api.markifact.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"The write gateway can change advertising budgets, bids and campaign status. Enabling campaigns or raising budgets can spend money in connected ad accounts.","evidence":"Actions: run_write_operation. https://docs.markifact.com/nodes/gads/gads_custom_app — operation index: Update Campaign Budget, Update Campaign Status, Update Keyword Bid; https://docs.markifact.com/nodes/gads/gads_create_campaign — daily_budget required; status default PAUSED","risk_type":"spends_money","severity":"high","title":"Changes advertising budgets and campaign spend"},{"description":"Retrieves marketing, advertising, CRM and analytics information from connected accounts.","evidence":"Actions: run_operation, list_connections, read_file. https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community — tool_names; description lists 30+ platforms","risk_type":"reads_private_data","severity":"medium","title":"Reads connected business and advertising data"},{"description":"Prepares and uploads media into connected advertising platforms.","evidence":"Actions: prepare_media_upload, upload_media. https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community — tool_names","risk_type":"modifies_data","severity":"medium","title":"Uploads media to advertising platforms"}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"contact@markifact.com","tags":["spends_money","reads_private_data","modifies_data"],"tools":[{"description":"","name":"find_operations","risk":{"category":"code_execution","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Campaign spending, sends, deletion, administration and production writes may be reachable and cannot be bounded; these impacts are potential rather than verified."}},{"description":"","name":"get_file_url"},{"description":"","name":"get_operation_inputs","risk":{"category":"code_execution","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Campaign spending, sends, deletion, administration and production writes may be reachable and cannot be bounded; these impacts are potential rather than verified."}},{"description":"","name":"list_connections"},{"description":"","name":"prepare_media_upload","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: This can move user files into connected services."}},{"description":"","name":"read_file","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: This can move user files into connected services."}},{"description":"","name":"report_markifact_feedback"},{"description":"","name":"run_operation","risk":{"category":"code_execution","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Campaign spending, sends, deletion, administration and production writes may be reachable and cannot be bounded; these impacts are potential rather than verified."}},{"description":"","name":"run_write_operation","risk":{"category":"code_execution","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Campaign spending, sends, deletion, administration and production writes may be reachable and cannot be bounded; these impacts are potential rather than verified."}},{"description":"","name":"upload_media","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: This can move user files into connected services."}}],"tools_count":10,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/d6de6849-5038-4932-a859-74b92ba2fe83","uuid":"c8a7fc43-e0f2-5b04-afc8-3f9ae9fccf05","verification_tier":"community","version":""},"query_key":"markifact","schema_version":1,"status":"match"}