{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-08","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Review trade journals, market research and recorded strategy rules with Slatemark. Compare historical outcomes using delayed market data and source-linked context. Research and brokerage access are read-only; only Slatemark journal records can be changed.","did":"cbbd8322-4cc4-40f0-a049-5e458a305b97","documentation_url":"https://slatemark.ai/first-workflow","editorial_description":{"extended_description":"Market data is approximately fifteen minutes delayed and freshness-labeled. Plus adds authorized brokerage account views and available fill imports; listed option snapshots have no Greeks and use indicative, non-executable midpoint marks. The scorecard describes past closed trades rather than forecasting results. Slatemark cannot place or modify orders, move money or change brokerage accounts, and does not provide investment advice.","schema_version":1,"summary":"Review trade journals, market research and recorded strategy rules with Slatemark.\nCompare historical outcomes using delayed market data and source-linked context.\nResearch and brokerage access are read-only; only Slatemark journal records can be changed."},"homepage_url":"","icon":"","id":"cbbd8322-4cc4-40f0-a049-5e458a305b97","installs":0,"last_scanned":"","license":"","long_description":"Market data is approximately fifteen minutes delayed and freshness-labeled. Plus adds authorized brokerage account views and available fill imports; listed option snapshots have no Greeks and use indicative, non-executable midpoint marks. The scorecard describes past closed trades rather than forecasting results. Slatemark cannot place or modify orders, move money or change brokerage accounts, and does not provide investment advice.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly includes delete_journal_entry.","reasoning":"Deleting a user's trading journal record is destructive data removal.","risk_type":"data_deletion","severity":"high","title":"Trade journal entries can be deleted","triggering_tools_or_skills":["delete_journal_entry"]},{"evidence":"Declared names and official workflow docs confirm saving and changing only Slatemark's record.","reasoning":"These persist journal and planning data.","risk_type":"data_modification","severity":"medium","title":"Journal entries, tags, annotations and active plans can be changed","triggering_tools_or_skills":["record_journal_entry","update_journal_entry","annotate_trades","create_custom_tag","set_active_plan"]},{"evidence":"The listing and official page say balances, positions, orders and activity are read-only.","reasoning":"Sensitive financial account data is exposed to the model, but no trade execution is available.","risk_type":"private_data_read","severity":"low","title":"Authorized brokerage account views can be analyzed","triggering_tools_or_skills":["get_account_profile","get_position_context","summarize_pnl","analyze_portfolio_risk"]},{"evidence":"The connector runs at https://slatemark.ai/mcp without a pinned server implementation in the packet.","reasoning":"The hosted implementation and tool behavior can change independently of this snapshot, so monitoring and runtime verification remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Slatemark is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; brokerage Account Data is read-only and official docs state the connector cannot place, modify or cancel orders.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/cbbd8322-4cc4-40f0-a049-5e458a305b97.json","what_it_proves":"Candidate PR #125 record identity (name \"Slatemark\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/cbbd8322-4cc4-40f0-a049-5e458a305b97: complete tool_names inventory (87 tools), remote streamable-http endpoint https://slatemark.ai/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:04:12Z","url_or_path":"https://slatemark.ai/first-workflow","what_it_proves":"Slatemark documents read-only market/brokerage access, journal-only writes, and no trading/order actions."}],"primary_reason":"Slatemark cannot trade but can delete and modify the user's trade-journal records.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:cbbd8322-4cc4-40f0-a049-5e458a305b97","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 87 tools and official workflow boundary. No order placement/spend action exists; High derives solely from journal deletion.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":87,"tools_or_skills_total":87},"name":"Slatemark","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=cbbd8322-4cc4-40f0-a049-5e458a305b97&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://slatemark.ai/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"PD&A LLC","publisher_url":"https://www.pdassoc.io/","remote_url":"https://slatemark.ai/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Deleting a user's trading journal record is destructive data removal.","evidence":"Trade journal entries can be deleted: The complete inventory explicitly includes delete_journal_entry.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Trade journal entries can be deleted","triggering_tools":["delete_journal_entry"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist journal and planning data.","evidence":"Journal entries, tags, annotations and active plans can be changed: Declared names and official workflow docs confirm saving and changing only Slatemark's record.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Journal entries, tags, annotations and active plans can be changed","triggering_tools":["record_journal_entry","update_journal_entry","annotate_trades","create_custom_tag","set_active_plan"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Sensitive financial account data is exposed to the model, but no trade execution is available.","evidence":"Authorized brokerage account views can be analyzed: The listing and official page say balances, positions, orders and activity are read-only.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Authorized brokerage account views can be analyzed","triggering_tools":["get_account_profile","get_position_context","summarize_pnl","analyze_portfolio_risk"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@slatemark.ai","tags":["accesses_calendar","deletes_data","modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"analyze_beta"},{"description":"","name":"analyze_correlation"},{"description":"","name":"analyze_credit_quality_curve"},{"description":"","name":"analyze_credit_term_structure"},{"description":"","name":"analyze_journal_patterns"},{"description":"","name":"analyze_kelly_sizing"},{"description":"","name":"analyze_macro_regime"},{"description":"","name":"analyze_market_regime"},{"description":"","name":"analyze_option_chain"},{"description":"","name":"analyze_pair_spread"},{"description":"","name":"analyze_portfolio_concentration"},{"description":"","name":"analyze_portfolio_factor_exposure"},{"description":"","name":"analyze_portfolio_risk"},{"description":"","name":"analyze_portfolio_scenario"},{"description":"","name":"analyze_returns"},{"description":"","name":"analyze_rolling_correlation"},{"description":"","name":"analyze_support_resistance"},{"description":"","name":"analyze_volatility_regime"},{"description":"","name":"analyze_volatility_targeted_size"},{"description":"","name":"annotate_trades","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist journal and planning data."}},{"description":"","name":"create_custom_tag","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist journal and planning data."}},{"description":"","name":"delete_journal_entry","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting a user's trading journal record is destructive data removal."}},{"description":"","name":"get_account_profile"},{"description":"","name":"get_auction_results"},{"description":"","name":"get_behavioral_context"},{"description":"","name":"get_book_level_check"},{"description":"","name":"get_cftc_dataset"},{"description":"","name":"get_company_concept"},{"description":"","name":"get_company_facts"},{"description":"","name":"get_company_filings"},{"description":"","name":"get_cot_disaggregated"},{"description":"","name":"get_cot_financial_futures"},{"description":"","name":"get_cot_legacy"},{"description":"","name":"get_daily_debrief"},{"description":"","name":"get_daily_treasury_statement"},{"description":"","name":"get_dataset"},{"description":"","name":"get_debt_to_the_penny"},{"description":"","name":"get_eia_series"},{"description":"","name":"get_electricity_generation"},{"description":"","name":"get_factors"},{"description":"","name":"get_filing"},{"description":"","name":"get_fomc_meetings"},{"description":"","name":"get_frame"},{"description":"","name":"get_high_impact_calendar"},{"description":"","name":"get_industry_portfolios"},{"description":"","name":"get_insider_transactions"},{"description":"","name":"get_institutional_portfolio"},{"description":"","name":"get_journal_entry"},{"description":"","name":"get_journaling_stats"},{"description":"","name":"get_market_hours"},{"description":"","name":"get_movers"},{"description":"","name":"get_natural_gas_storage"},{"description":"","name":"get_next_fomc_meeting"},{"description":"","name":"get_option_chain"},{"description":"","name":"get_option_expirations"},{"description":"","name":"get_petroleum_weekly_stocks"},{"description":"","name":"get_position_context"},{"description":"","name":"get_price_history"},{"description":"","name":"get_quote"},{"description":"","name":"get_quotes"},{"description":"","name":"get_release_schedule"},{"description":"","name":"get_rule"},{"description":"","name":"get_series"},{"description":"","name":"get_series_info"},{"description":"","name":"get_session_briefing"},{"description":"","name":"get_session_status"},{"description":"","name":"get_tax_context"},{"description":"","name":"list_account_profiles"},{"description":"","name":"list_datasets"},{"description":"","name":"list_journal_entries"},{"description":"","name":"list_releases"},{"description":"","name":"list_rules"},{"description":"","name":"list_tags"},{"description":"","name":"list_untagged_trades"},{"description":"","name":"propose_profile_update"},{"description":"","name":"record_journal_entry","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist journal and planning data."}},{"description":"","name":"run_technical_analysis"},{"description":"","name":"search_companies"},{"description":"","name":"search_filings"},{"description":"","name":"search_instruments"},{"description":"","name":"search_series"},{"description":"","name":"set_active_plan","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist journal and planning data."}},{"description":"","name":"suggest_tags"},{"description":"","name":"summarize_pnl"},{"description":"","name":"update_journal_entry","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist journal and planning data."}},{"description":"","name":"validate_journal_entry"},{"description":"","name":"validate_journal_rule_refs"}],"tools_count":87,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/cbbd8322-4cc4-40f0-a049-5e458a305b97","uuid":"cd6ed385-c40c-5227-9311-07504b77c152","verification_tier":"community","version":""},"query_key":"pd a llc slatemark","schema_version":1,"status":"match"}