{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-26","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"PromptedSite helps Claude find and compare website-design templates. Retrieve free prompts or premium text covered by active entitlement. The read-only connector cannot buy products or modify sites.","did":"3c946a64-eab0-4a8a-a78b-0a75280ff4ed","documentation_url":"https://promptedsite.com/connector","editorial_description":{"extended_description":"A PromptedSite account is required, including for free prompts. Templates expose category, tier, asset type, technology stack, and preview links. Comparisons support two to five templates, and access is checked against current purchase records.","schema_version":1,"summary":"PromptedSite helps Claude find and compare website-design templates.\nRetrieve free prompts or premium text covered by active entitlement.\nThe read-only connector cannot buy products or modify sites."},"homepage_url":"","icon":"","id":"3c946a64-eab0-4a8a-a78b-0a75280ff4ed","installs":0,"last_scanned":"","license":"","long_description":"A PromptedSite account is required, including for free prompts. Templates expose category, tier, asset type, technology stack, and preview links. Comparisons support two to five templates, and access is checked against current purchase records.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"All five tools are read-only and entitlement is checked against current purchase records on each call.","reasoning":"The connector exposes licensed prompt content and account access state but cannot modify or purchase anything.","risk_type":"private_data_read","severity":"low","title":"Reads account entitlement and licensed design prompts","triggering_tools_or_skills":["get_promptedsite_access","get_design_prompt","compare_design_templates","search_design_templates"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication exposes only catalog data, account entitlement and prompt text. The description explicitly excludes account creation, checkout, money movement, site mutation and source-archive download.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"complete","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/3c946a64-eab0-4a8a-a78b-0a75280ff4ed.json","what_it_proves":"Candidate PR #125 record identity (name \"PromptedSite\", publisher, type web_connector) and 5 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/3c946a64-eab0-4a8a-a78b-0a75280ff4ed: complete tool_names inventory (5 tools), remote streamable-http endpoint https://promptedsite.com/api/mcp, auth_posture auth_required, publisher-declared permissions text, declared sensitive data types, directory tier community"}],"primary_reason":"PromptedSite is read-only template, entitlement and prompt retrieval.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:3c946a64-eab0-4a8a-a78b-0a75280ff4ed","reviewed_at":"2026-10-10","reviewer_notes":"Returned prompt text is untrusted content.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":5,"tools_or_skills_total":5},"name":"PromptedSite","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=3c946a64-eab0-4a8a-a78b-0a75280ff4ed&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://promptedsite.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"PromptedSite","publisher_url":"https://promptedsite.com/","remote_url":"https://promptedsite.com/api/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: The connector exposes licensed prompt content and account access state but cannot modify or purchase anything.","evidence":"Reads account entitlement and licensed design prompts: All five tools are read-only and entitlement is checked against current purchase records on each call.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads account entitlement and licensed design prompts","triggering_tools":["get_promptedsite_access","get_design_prompt","compare_design_templates","search_design_templates"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@promptedsite.com","tags":["network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"compare_design_templates"},{"description":"","name":"get_design_template"},{"description":"","name":"search_design_templates"},{"description":"","name":"get_promptedsite_access"},{"description":"","name":"get_design_prompt"}],"tools_count":5,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/3c946a64-eab0-4a8a-a78b-0a75280ff4ed","uuid":"2716c7ec-fb1d-5b23-9032-0ddefb7af6a3","verification_tier":"community","version":""},"query_key":"promptedsite","schema_version":1,"status":"match"}