{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-05","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Project Desk organizes projects, issues, handoffs, and decisions across agent work. Update tickets and project context, track completion, and return decisions for your attention. Separate attention and agent queues distinguish human judgment from scoped execution.","did":"a396303f-6de7-40ce-af89-8dc1e0a26194","documentation_url":"https://atlier.ai/connect","editorial_description":{"extended_description":"Archive or restore projects and preview project removal. Project Desk reflects approved context from your agents; it does not itself open repositories or scan your machine.","schema_version":1,"summary":"Project Desk organizes projects, issues, handoffs, and decisions across agent work.\nUpdate tickets and project context, track completion, and return decisions for your attention.\nSeparate attention and agent queues distinguish human judgment from scoped execution."},"homepage_url":"","icon":"https://atlier.ai/icon.png","id":"a396303f-6de7-40ce-af89-8dc1e0a26194","installs":0,"last_scanned":"","license":"","long_description":"Archive or restore projects and preview project removal. Project Desk reflects approved context from your agents; it does not itself open repositories or scan your machine.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Explicit tools remove project resources or visibility.","reasoning":"They can destroy operational work state.","risk_type":"data_deletion","severity":"high","title":"Archives/removes projects and previews","triggering_tools_or_skills":["atlier_project_archive","atlier_project_remove","atlier_project_remove_preview"]},{"evidence":"These actions communicate work/decisions to agents or collaborators.","reasoning":"They act as the connected user.","risk_type":"messaging_as_user","severity":"high","title":"Creates/issues handoffs and return decisions","triggering_tools_or_skills":["atlier_handoff","atlier_issue","atlier_return_resolve"]},{"evidence":"The tools control automated project workflows.","reasoning":"They alter live agent/project operations.","risk_type":"deployment_infrastructure","severity":"high","title":"Runs project scans and closes/moves issues","triggering_tools_or_skills":["atlier_project_scan","atlier_issue_close","atlier_issue_move"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes projects/issues to the connected workspace.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/a396303f-6de7-40ce-af89-8dc1e0a26194.json","what_it_proves":"Candidate PR #125 record identity (name \"Project Desk\", publisher, type web_connector) and 12 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/a396303f-6de7-40ce-af89-8dc1e0a26194: complete tool_names inventory (12 tools), remote streamable-http endpoint https://atlier.ai/mcp, auth_posture auth_required, publisher-declared permissions text, directory tier community"}],"primary_reason":"Project Desk can remove projects and direct multi-agent project workflows.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:a396303f-6de7-40ce-af89-8dc1e0a26194","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 12 tools.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":12,"tools_or_skills_total":12},"name":"Project Desk","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=a396303f-6de7-40ce-af89-8dc1e0a26194&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://atlier.ai/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Wilds Inc.","publisher_url":"https://atlier.ai/","remote_url":"https://atlier.ai/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: They can destroy operational work state.","evidence":"Archives/removes projects and previews: Explicit tools remove project resources or visibility.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Archives/removes projects and previews","triggering_tools":["atlier_project_archive","atlier_project_remove","atlier_project_remove_preview"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: They act as the connected user.","evidence":"Creates/issues handoffs and return decisions: These actions communicate work/decisions to agents or collaborators.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Creates/issues handoffs and return decisions","triggering_tools":["atlier_handoff","atlier_issue","atlier_return_resolve"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: They alter live agent/project operations.","evidence":"Runs project scans and closes/moves issues: The tools control automated project workflows.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Runs project scans and closes/moves issues","triggering_tools":["atlier_project_scan","atlier_issue_close","atlier_issue_move"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://atlier.ai/support","tags":["code_deployment","deletes_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"atlier_handoff","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They act as the connected user."}},{"description":"","name":"atlier_issue","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They act as the connected user."}},{"description":"","name":"atlier_issue_close","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They alter live agent/project operations."}},{"description":"","name":"atlier_issue_move","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They alter live agent/project operations."}},{"description":"","name":"atlier_issue_update"},{"description":"","name":"atlier_project_archive","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy operational work state."}},{"description":"","name":"atlier_project_scan","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They alter live agent/project operations."}},{"description":"","name":"atlier_project_unarchive"},{"description":"","name":"atlier_return_resolve","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They act as the connected user."}},{"description":"","name":"atlier_update_project"},{"description":"","name":"atlier_project_remove_preview","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy operational work state."}},{"description":"","name":"atlier_project_remove","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy operational work state."}}],"tools_count":12,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/a396303f-6de7-40ce-af89-8dc1e0a26194","uuid":"75199626-3032-55db-87a7-57eadc209690","verification_tier":"community","version":""},"query_key":"project desk","schema_version":1,"status":"match"}