{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-11","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Find potential leads in social mentions with RedReplier. Review scored posts from Reddit, X, Hacker News and Bluesky and classify leads. Manage monitored websites, keywords and email alerts in your account.","did":"02a8b21a-670e-4a70-8f26-d4361d90b6cc","documentation_url":"https://www.redreplier.com/features/agents/docs","editorial_description":{"extended_description":"Mentions can be filtered by source, status, score and date. Controls cover creating or deleting monitored sites, editing and disabling keywords, reviewing keyword allowances and potential charges, and changing alert frequency. A RedReplier account with at least one monitored website and keyword set is needed to receive mentions.","schema_version":1,"summary":"Find potential leads in social mentions with RedReplier.\nReview scored posts from Reddit, X, Hacker News and Bluesky and classify leads.\nManage monitored websites, keywords and email alerts in your account."},"homepage_url":"","icon":"https://www.redreplier.com/logo_small.png","id":"02a8b21a-670e-4a70-8f26-d4361d90b6cc","installs":0,"last_scanned":"","license":"","long_description":"Mentions can be filtered by source, status, score and date. Controls cover creating or deleting monitored sites, editing and disabling keywords, reviewing keyword allowances and potential charges, and changing alert frequency. A RedReplier account with at least one monitored website and keyword set is needed to receive mentions.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Two declared tools explicitly delete saved keywords and website records in the authenticated RedReplier account.","reasoning":"Deleting live monitoring configuration is destructive and can stop alerts or lose configured resources.","risk_type":"data_deletion","severity":"high","title":"Keywords and monitored websites can be deleted","triggering_tools_or_skills":["delete_keyword","delete_website"]},{"evidence":"The declared inventory includes create, edit, enable, disable, and update operations on monitored resources and alert state.","reasoning":"These actions persistently change how the service monitors and handles social mentions.","risk_type":"data_modification","severity":"medium","title":"Monitoring configuration and statuses can change","triggering_tools_or_skills":["add_keywords","create_website","disable_keyword","edit_keyword","enable_keyword","update_alert_settings","update_mention_status","update_website"]},{"evidence":"Directory description and tool names show that website URLs are supplied for analysis and monitoring.","reasoning":"If destination validation is not restrictive, user-controlled URLs can cause outbound requests from the service.","risk_type":"arbitrary_network_access","severity":"low","title":"Website analyzer accepts external destinations","triggering_tools_or_skills":["analyze_website","create_website","update_website"]},{"evidence":"The tools return third-party social posts and externally hosted website content into the assistant context.","reasoning":"Public adversarial text can attempt to influence model behavior.","risk_type":"prompt_injection_exposure","severity":"low","title":"Social mentions and websites are untrusted text","triggering_tools_or_skills":["list_mentions","explain_mention","analyze_website"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication required for a RedReplier account; exact scopes and token lifetime are not documented in the packet.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/02a8b21a-670e-4a70-8f26-d4361d90b6cc.json","what_it_proves":"Candidate PR #125 record identity (name \"RedReplier - social listening and lead finder\", publisher, type web_connector) and 20 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/02a8b21a-670e-4a70-8f26-d4361d90b6cc: complete tool_names inventory (20 tools), remote streamable-http endpoint https://mcp.redreplier.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Unambiguous delete_keyword and delete_website actions establish destructive capability independent of missing schemas.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:02a8b21a-670e-4a70-8f26-d4361d90b6cc","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 20 names; deletion is verified by explicit tool names. Runtime verification remains appropriate for URL restrictions, authorization granularity, and alert side effects.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":20,"tools_or_skills_total":20},"name":"RedReplier - social listening and lead finder","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=02a8b21a-670e-4a70-8f26-d4361d90b6cc&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.redreplier.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"RedReplier","publisher_url":"https://www.redreplier.com/","remote_url":"https://mcp.redreplier.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Deleting live monitoring configuration is destructive and can stop alerts or lose configured resources.","evidence":"Keywords and monitored websites can be deleted: Two declared tools explicitly delete saved keywords and website records in the authenticated RedReplier account.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Keywords and monitored websites can be deleted","triggering_tools":["delete_keyword","delete_website"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently change how the service monitors and handles social mentions.","evidence":"Monitoring configuration and statuses can change: The declared inventory includes create, edit, enable, disable, and update operations on monitored resources and alert state.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Monitoring configuration and statuses can change","triggering_tools":["add_keywords","create_website","disable_keyword","edit_keyword","enable_keyword","update_alert_settings","update_mention_status","update_website"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: If destination validation is not restrictive, user-controlled URLs can cause outbound requests from the service.","evidence":"Website analyzer accepts external destinations: Directory description and tool names show that website URLs are supplied for analysis and monitoring.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Website analyzer accepts external destinations","triggering_tools":["analyze_website","create_website","update_website"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"contact@redreplier.com","tags":["deletes_data","forwards_data_to_third_party","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"add_keywords","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently change how the service monitors and handles social mentions."}},{"description":"","name":"analyze_website"},{"description":"","name":"count_mentions"},{"description":"","name":"create_website","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently change how the service monitors and handles social mentions."}},{"description":"","name":"delete_keyword","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting live monitoring configuration is destructive and can stop alerts or lose configured resources."}},{"description":"","name":"delete_website","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting live monitoring configuration is destructive and can stop alerts or lose configured resources."}},{"description":"","name":"disable_keyword","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently change how the service monitors and handles social mentions."}},{"description":"","name":"edit_keyword","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently change how the service monitors and handles social mentions."}},{"description":"","name":"enable_keyword","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently change how the service monitors and handles social mentions."}},{"description":"","name":"explain_mention"},{"description":"","name":"get_alert_settings"},{"description":"","name":"get_website"},{"description":"","name":"keyword_change_usage"},{"description":"","name":"list_mentions"},{"description":"","name":"list_websites"},{"description":"","name":"preview_activate_pending"},{"description":"","name":"preview_keyword_billing"},{"description":"","name":"update_alert_settings","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently change how the service monitors and handles social mentions."}},{"description":"","name":"update_mention_status","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently change how the service monitors and handles social mentions."}},{"description":"","name":"update_website","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently change how the service monitors and handles social mentions."}}],"tools_count":20,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/02a8b21a-670e-4a70-8f26-d4361d90b6cc","uuid":"500bbbbe-997a-5dae-b0a2-5df90f4c7d1c","verification_tier":"community","version":""},"query_key":"redreplier social listening and lead finder","schema_version":1,"status":"match"}