{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-16","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Riley brings customer and revenue data into Claude for business analysis. Combine CRM, conversations, product usage, support, and document context to examine pipeline, account health, and customer themes. The connector creates datasets, ingests data, and runs analyses with status tracking.","did":"4b827665-15fa-4dc3-80e0-9a26f9788c2c","documentation_url":"https://app.askriley.io/doc/mcp","editorial_description":{"extended_description":"The source identifies Salesforce, HubSpot, Gong, Slack, email, and call transcripts among its possible business-data sources. Analysis is intended to surface patterns, risks, and expansion opportunities across sales and customer-success work.","schema_version":1,"summary":"Riley brings customer and revenue data into Claude for business analysis.\nCombine CRM, conversations, product usage, support, and document context to examine pipeline, account health, and customer themes.\nThe connector creates datasets, ingests data, and runs analyses with status tracking."},"homepage_url":"","icon":"","id":"4b827665-15fa-4dc3-80e0-9a26f9788c2c","installs":0,"last_scanned":"","license":"","long_description":"The source identifies Salesforce, HubSpot, Gong, Slack, email, and call transcripts among its possible business-data sources. Analysis is intended to surface patterns, risks, and expansion opportunities across sales and customer-success work.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The connector creates persistent revenue-context datasets and uploads/ingests business data.","reasoning":"These operations copy and persist sensitive organization content in Riley.","risk_type":"file_write","severity":"medium","title":"Creates datasets and ingests private uploads","triggering_tools_or_skills":["riley_create_dataset","riley_request_ingest_upload","riley_inline_ingest_upload","riley_confirm_ingest_upload"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication exposes continuously integrated CRM, email, Slack, support, usage, documents and transcript data plus Riley datasets and uploads.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"complete","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/4b827665-15fa-4dc3-80e0-9a26f9788c2c.json","what_it_proves":"Candidate PR #125 record identity (name \"Riley\", publisher, type web_connector) and 8 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/4b827665-15fa-4dc3-80e0-9a26f9788c2c: complete tool_names inventory (8 tools), remote streamable-http endpoint https://api.askriley.io/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Riley creates and ingests private revenue-context datasets.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:4b827665-15fa-4dc3-80e0-9a26f9788c2c","reviewed_at":"2026-10-10","reviewer_notes":"Connected emails, Slack, tickets and transcripts are untrusted and highly sensitive; resolve whether analysis consumes credits.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":8,"tools_or_skills_total":8},"name":"Riley","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=4b827665-15fa-4dc3-80e0-9a26f9788c2c&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.askriley.io/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Riley","publisher_url":"https://askriley.io/","remote_url":"https://api.askriley.io/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, change, export, or otherwise write files. Review findings: These operations copy and persist sensitive organization content in Riley.","evidence":"Creates datasets and ingests private uploads: The connector creates persistent revenue-context datasets and uploads/ingests business data.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Creates datasets and ingests private uploads","triggering_tools":["riley_create_dataset","riley_request_ingest_upload","riley_inline_ingest_upload","riley_confirm_ingest_upload"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@askriley.io","tags":["filesystem_access","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"riley_analyze"},{"description":"","name":"riley_confirm_ingest_upload","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: These operations copy and persist sensitive organization content in Riley."}},{"description":"","name":"riley_create_dataset","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: These operations copy and persist sensitive organization content in Riley."}},{"description":"","name":"riley_get_analysis_status"},{"description":"","name":"riley_get_ingest_status"},{"description":"","name":"riley_inline_ingest_upload","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: These operations copy and persist sensitive organization content in Riley."}},{"description":"","name":"riley_list_datasets"},{"description":"","name":"riley_request_ingest_upload","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: These operations copy and persist sensitive organization content in Riley."}}],"tools_count":8,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/4b827665-15fa-4dc3-80e0-9a26f9788c2c","uuid":"0f7178d8-5340-5d2f-8cef-3f87244ccdaa","verification_tier":"community","version":""},"query_key":"riley riley","schema_version":1,"status":"match"}