{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-16","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Search and read Rimo Voice meeting transcripts, notes and documents. Find decisions by keyword or meaning and combine meeting context into reports. Access follows your connected Rimo account's viewing permissions.","did":"028c58e7-0440-4c59-a092-0543f806405d","documentation_url":"https://rimo.github.io/rimo-cli/rimo-in-claude.html#%E3%82%B9%E3%83%86%E3%83%83%E3%83%95%E3%82%9A-2-%E2%80%94-%E5%90%84%E3%83%A1%E3%83%B3%E3%83%8F%E3%82%99%E3%83%BC%E3%81%8B%E3%82%99%E6%8E%A5%E7%B6%9A%E3%81%99%E3%82%8B-%E3%83%A1%E3%83%B3%E3%83%8F%E3%82%99%E3%83%BC%E3%81%93%E3%82%99%E3%81%A8%E3%81%AB%E4%B8%80%E5%BA%A6","editorial_description":{"extended_description":"The connector can retrieve meeting participants, chat and associated documents alongside notes and transcripts. It supports investigating past decisions and using meeting context to prepare correspondence. OAuth sign-in is required, and the source limits results to meetings or notes the user is permitted to view.","schema_version":1,"summary":"Search and read Rimo Voice meeting transcripts, notes and documents.\nFind decisions by keyword or meaning and combine meeting context into reports.\nAccess follows your connected Rimo account's viewing permissions."},"homepage_url":"","icon":"","id":"028c58e7-0440-4c59-a092-0543f806405d","installs":0,"last_scanned":"","license":"","long_description":"The connector can retrieve meeting participants, chat and associated documents alongside notes and transcripts. It supports investigating past decisions and using meeting context to prepare correspondence. OAuth sign-in is required, and the source limits results to meetings or notes the user is permitted to view.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"The complete inventory and Directory description identify authenticated retrieval of meeting notes, documents, chat, and participant lists.","reasoning":"Meeting records commonly contain confidential organizational and personal information.","risk_type":"private_data_read","severity":"low","title":"Meeting notes and participant data are readable","triggering_tools_or_skills":["note_get","note_read","note_get_document","note_list_participants","note_get_meeting_chat"]},{"evidence":"The official Directory marks the remote connector as authentication-required for access to private Rimo records.","reasoning":"Ongoing authenticated access implies a reusable credential or session, though token details were unavailable.","risk_type":"persistent_credentials","severity":"low","title":"Authenticated remote connection retains authorization","triggering_tools_or_skills":[]},{"evidence":"These tools retrieve free-form transcripts, documents, meeting chat, and notes authored by meeting participants.","reasoning":"Retrieved text is untrusted input and can contain adversarial instructions.","risk_type":"prompt_injection_exposure","severity":"low","title":"User-authored meeting text enters model context","triggering_tools_or_skills":["note_read","note_search","note_semantic_search","note_get_meeting_chat"]},{"evidence":"The Directory inventory was complete, but the linked official page could not be retrieved informatively and no source was reviewed.","reasoning":"Runtime enforcement and exact schemas remain dependent on the hosted service.","risk_type":"provenance_uncertainty","severity":"low","title":"Remote implementation not inspected","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Directory reports authentication required; the exact OAuth scopes and token lifetime were not available from an informative official page.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/028c58e7-0440-4c59-a092-0543f806405d.json","what_it_proves":"Candidate PR #125 record identity (name \"Rimo Voice\", publisher, type web_connector) and 14 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/028c58e7-0440-4c59-a092-0543f806405d: complete tool_names inventory (14 tools), remote streamable-http endpoint https://mcp.rimo.app/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"All 14 complete-inventory names and the Directory description are read/search/fetch operations over meeting records; no mutation tool is declared.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:028c58e7-0440-4c59-a092-0543f806405d","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 14 names. The direct official documentation lookup was uninformative, so exact schemas, OAuth scopes, and token lifetime require runtime verification.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":14,"tools_or_skills_total":14},"name":"Rimo Voice","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=028c58e7-0440-4c59-a092-0543f806405d&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://rimo.app/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Rimo合同会社","publisher_url":"https://rimo.app/","remote_url":"https://mcp.rimo.app/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Meeting records commonly contain confidential organizational and personal information.","evidence":"Meeting notes and participant data are readable: The complete inventory and Directory description identify authenticated retrieval of meeting notes, documents, chat, and participant lists.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Meeting notes and participant data are readable","triggering_tools":["note_get","note_read","note_get_document","note_list_participants","note_get_meeting_chat"]},{"description":"This connector may rely on credentials or tokens that remain valid beyond one request. Review findings: Ongoing authenticated access implies a reusable credential or session, though token details were unavailable.","evidence":"Authenticated remote connection retains authorization: The official Directory marks the remote connector as authentication-required for access to private Rimo records.","manual_risk_type":"persistent_credentials","remediation":{"block_tool_categories":["privilege"],"steps":["Use short-lived, narrowly scoped credentials where supported.","Store secrets in an approved secret manager and rotate them regularly."]},"risk_type":"requires_persistent_credentials","severity":"low","title":"Authenticated remote connection retains authorization","triggering_tools":[]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@rimo.app","tags":["accesses_calendar","accesses_messaging","network_access","oauth_required","reads_private_data","requires_persistent_credentials","web_connector"],"tools":[{"description":"","name":"fetch"},{"description":"","name":"note_ask"},{"description":"","name":"note_get"},{"description":"","name":"note_get_document"},{"description":"","name":"note_get_meeting_chat"},{"description":"","name":"note_list"},{"description":"","name":"note_list_attended"},{"description":"","name":"note_list_documents"},{"description":"","name":"note_list_participants"},{"description":"","name":"note_read"},{"description":"","name":"note_search"},{"description":"","name":"note_semantic_search"},{"description":"","name":"search"},{"description":"","name":"team_list"}],"tools_count":14,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/028c58e7-0440-4c59-a092-0543f806405d","uuid":"a6a7a14d-cac8-5452-88ca-8f8d687f60a2","verification_tier":"community","version":""},"query_key":"rimo voice","schema_version":1,"status":"match"}