{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-02","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Builds and operates Ninjo sales agents for Instagram and WhatsApp messaging. Configure prompts, triggers, knowledge, follow-ups and agent behavior. Test conversations, inspect performance and deploy or send messages through your Ninjo account.","did":"b6fd3d17-387a-48fd-beb0-b3c0eb6b4b10","documentation_url":"https://cortex-ops-wiki.pages.dev/site/wiki/","editorial_description":{"extended_description":"OAuth connects the workspace. Tools manage media, voice replies, contact limits, workflows and WhatsApp templates, and can pause or resume conversation agents. Agent and configuration deletion are supported alongside synthetic-conversation testing.","schema_version":1,"summary":"Builds and operates Ninjo sales agents for Instagram and WhatsApp messaging.\nConfigure prompts, triggers, knowledge, follow-ups and agent behavior.\nTest conversations, inspect performance and deploy or send messages through your Ninjo account."},"homepage_url":"","icon":"https://www.ninjo.ai/logo.png","id":"b6fd3d17-387a-48fd-beb0-b3c0eb6b4b10","installs":0,"last_scanned":"","license":"","long_description":"OAuth connects the workspace. Tools manage media, voice replies, contact limits, workflows and WhatsApp templates, and can pause or resume conversation agents. Agent and configuration deletion are supported alongside synthetic-conversation testing.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The stored inventory names deletion of agents, documents, threads, triggers, WhatsApp template definitions and workflows.","reasoning":"These tools destroy meaningful sales-agent automation and conversation resources.","risk_type":"data_deletion","severity":"high","title":"Deletes agents, workflows and messaging resources","triggering_tools_or_skills":["delete_agent","delete_document","delete_thread","delete_trigger","delete_whatsapp_template_definition","delete_workflow"]},{"evidence":"The inventory explicitly declares send_thread_message and send_whatsapp_template.","reasoning":"Sending Instagram/WhatsApp-facing content as the connected business is a High external-communication capability.","risk_type":"messaging_as_user","severity":"high","title":"Sends thread and WhatsApp messages","triggering_tools_or_skills":["send_thread_message","send_whatsapp_template"]},{"evidence":"Declared tools deploy the agent SDK, scaffold activation and change agent status.","reasoning":"These operations materially deploy or activate production sales automation.","risk_type":"deployment_infrastructure","severity":"high","title":"Deploys and activates sales agents","triggering_tools_or_skills":["deploy_agent_sdk","scaffold_agent_activation","set_agent_status"]},{"evidence":"candidate_tools_truncated is true for this 95-name stored inventory.","reasoning":"Missing Directory tools prevent a complete action and authorization assessment and require regeneration.","risk_type":"evidence_gap","severity":"low","title":"Candidate inventory is truncated","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for a Ninjo workspace, but the packet does not define scopes, approval gates, recipient restrictions or deployment roles.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"insufficient","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/b6fd3d17-387a-48fd-beb0-b3c0eb6b4b10.json","what_it_proves":"Candidate PR #125 record identity (name \"Ninjo\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/b6fd3d17-387a-48fd-beb0-b3c0eb6b4b10: complete tool_names inventory (95 tools), remote streamable-http endpoint https://cortex-gateway.ninjoaiplatform.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Ninjo can delete automation resources, deploy agents and send WhatsApp/thread messages, and its stored inventory is incomplete.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:b6fd3d17-387a-48fd-beb0-b3c0eb6b4b10","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 95 stored names. The omitted Directory tools may add capabilities; refresh the full inventory before publication and runtime-test message recipients, deployment approvals and destructive confirmations.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":95,"tools_or_skills_total":95},"name":"Ninjo","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=b6fd3d17-387a-48fd-beb0-b3c0eb6b4b10&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.ninjo.ai/privacy-policy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Ninjo","publisher_url":"https://www.ninjo.ai/","remote_url":"https://cortex-gateway.ninjoaiplatform.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These tools destroy meaningful sales-agent automation and conversation resources.","evidence":"Deletes agents, workflows and messaging resources: The stored inventory names deletion of agents, documents, threads, triggers, WhatsApp template definitions and workflows.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes agents, workflows and messaging resources","triggering_tools":["delete_agent","delete_document","delete_thread","delete_trigger","delete_whatsapp_template_definition","delete_workflow"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Sending Instagram/WhatsApp-facing content as the connected business is a High external-communication capability.","evidence":"Sends thread and WhatsApp messages: The inventory explicitly declares send_thread_message and send_whatsapp_template.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Sends thread and WhatsApp messages","triggering_tools":["send_thread_message","send_whatsapp_template"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: These operations materially deploy or activate production sales automation.","evidence":"Deploys and activates sales agents: Declared tools deploy the agent SDK, scaffold activation and change agent status.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Deploys and activates sales agents","triggering_tools":["deploy_agent_sdk","scaffold_agent_activation","set_agent_status"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@ninjo.ai","tags":["accesses_messaging","code_deployment","deletes_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"associate_whatsapp_direct_numbers"},{"description":"","name":"bootstrap_discord_channel"},{"description":"","name":"create_agent"},{"description":"","name":"create_document"},{"description":"","name":"create_feedback_upload_url"},{"description":"","name":"create_resource_upload_url"},{"description":"","name":"create_thread"},{"description":"","name":"create_trigger"},{"description":"","name":"delete_agent","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These tools destroy meaningful sales-agent automation and conversation resources."}},{"description":"","name":"delete_contact_limit"},{"description":"","name":"delete_creator_resource"},{"description":"","name":"delete_custom_notification"},{"description":"","name":"delete_custom_property"},{"description":"","name":"delete_document","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These tools destroy meaningful sales-agent automation and conversation resources."}},{"description":"","name":"delete_notification_destination"},{"description":"","name":"delete_thread","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These tools destroy meaningful sales-agent automation and conversation resources."}},{"description":"","name":"delete_trigger","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These tools destroy meaningful sales-agent automation and conversation resources."}},{"description":"","name":"delete_trigger_negative_config"},{"description":"","name":"delete_whatsapp_template_definition","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These tools destroy meaningful sales-agent automation and conversation resources."}},{"description":"","name":"delete_workflow","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These tools destroy meaningful sales-agent automation and conversation resources."}},{"description":"","name":"deploy_agent_sdk","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These operations materially deploy or activate production sales automation."}},{"description":"","name":"diagnose_agent"},{"description":"","name":"generate_synthetic_conversations"},{"description":"","name":"get_agent_config"},{"description":"","name":"get_agent_insights"},{"description":"","name":"get_agent_metrics"},{"description":"","name":"get_contact_limits_context"},{"description":"","name":"get_conversations"},{"description":"","name":"get_instagram_posts"},{"description":"","name":"get_instagram_profile"},{"description":"","name":"get_knowledge"},{"description":"","name":"get_me"},{"description":"","name":"get_peer_managed_files"},{"description":"","name":"get_playbook_doc"},{"description":"","name":"get_playbook_index"},{"description":"","name":"get_self_serve_data"},{"description":"","name":"get_thread_messages"},{"description":"","name":"get_trigger_negative_config"},{"description":"","name":"get_workflow_activity"},{"description":"","name":"list_agent_tools"},{"description":"","name":"list_agents"},{"description":"","name":"list_connected_accounts"},{"description":"","name":"list_contact_limits"},{"description":"","name":"list_creator_resources"},{"description":"","name":"list_custom_notifications"},{"description":"","name":"list_custom_properties"},{"description":"","name":"list_documents"},{"description":"","name":"list_influencer_connected_accounts"},{"description":"","name":"list_knowledge"},{"description":"","name":"list_notification_destinations"},{"description":"","name":"list_threads"},{"description":"","name":"list_trigger_audios"},{"description":"","name":"list_trigger_canned_responses"},{"description":"","name":"list_triggers"},{"description":"","name":"list_whatsapp_template_definitions"},{"description":"","name":"list_whatsapp_templates"},{"description":"","name":"list_workflows"},{"description":"","name":"pause_conversation_agent"},{"description":"","name":"preview_whatsapp_template_recipients"},{"description":"","name":"register_creator_resource"},{"description":"","name":"replace_objectives"},{"description":"","name":"report_feedback"},{"description":"","name":"restore_prompt_version"},{"description":"","name":"resume_conversation_agent"},{"description":"","name":"save_image"},{"description":"","name":"scaffold_agent_activation","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These operations materially deploy or activate production sales automation."}},{"description":"","name":"search_contacts"},{"description":"","name":"search_conversations"},{"description":"","name":"search_playbook"},{"description":"","name":"send_thread_message","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Sending Instagram/WhatsApp-facing content as the connected business is a High external-communication capability."}},{"description":"","name":"send_whatsapp_template","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Sending Instagram/WhatsApp-facing content as the connected business is a High external-communication capability."}},{"description":"","name":"set_agent_status","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These operations materially deploy or activate production sales automation."}},{"description":"","name":"set_connected_account"},{"description":"","name":"sync_keyword_triggers"},{"description":"","name":"sync_trigger_audios"},{"description":"","name":"sync_trigger_canned_responses"},{"description":"","name":"trigger_fetch_info"},{"description":"","name":"update_agent"},{"description":"","name":"update_agent_config"},{"description":"","name":"update_agent_mode"},{"description":"","name":"update_agent_voice"},{"description":"","name":"update_creator_resource"},{"description":"","name":"update_managed_file"},{"description":"","name":"update_prompt"},{"description":"","name":"update_resource_sending"},{"description":"","name":"update_tool"},{"description":"","name":"update_trigger"},{"description":"","name":"update_v5_config"},{"description":"","name":"upsert_contact_limit"},{"description":"","name":"upsert_custom_notification"},{"description":"","name":"upsert_custom_property"},{"description":"","name":"upsert_notification_destination"},{"description":"","name":"upsert_trigger_negative_config"},{"description":"","name":"upsert_whatsapp_template_definition"},{"description":"","name":"upsert_workflow"}],"tools_count":95,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/b6fd3d17-387a-48fd-beb0-b3c0eb6b4b10","uuid":"9e346dff-8389-559c-9ff7-fda9d10bee94","verification_tier":"community","version":""},"query_key":"ninjo","schema_version":1,"status":"match"}