{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-30","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Import business data into Loam and analyze it with Claude. Inspect tables and query revenue, pipelines, campaigns or operations. Data-changing SQL is also supported under the selected account's permissions.","did":"0467ee33-af64-45f6-8289-7d42a31c810b","documentation_url":"https://www.loamdata.com/docs","editorial_description":{"extended_description":"Supported file types described by Loam include CSV, Excel, Parquet, TSV and JSON. Tools cover upload and ingestion pipelines, run status and errors, table schemas, SQL validation, queries and mutations. Available data follows the current permissions of the connected Loam account.","schema_version":1,"summary":"Import business data into Loam and analyze it with Claude.\nInspect tables and query revenue, pipelines, campaigns or operations.\nData-changing SQL is also supported under the selected account's permissions."},"homepage_url":"","icon":"","id":"0467ee33-af64-45f6-8289-7d42a31c810b","installs":0,"last_scanned":"","license":"","long_description":"Supported file types described by Loam include CSV, Excel, Parquet, TSV and JSON. Tools cover upload and ingestion pipelines, run status and errors, table schemas, SQL validation, queries and mutations. Available data follows the current permissions of the connected Loam account.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The declared tools explicitly execute SQL queries and SQL mutations against authenticated Loam Data tables.","reasoning":"Arbitrary query and mutation execution can expose or alter broad datasets, with deletion possible depending on SQL restrictions.","risk_type":"query_execution","severity":"high","title":"Caller-supplied SQL can execute","triggering_tools_or_skills":["execute_sql_query","execute_sql_mutation"]},{"evidence":"The inventory provides persistent pipeline creation and multiple upload or row-ingestion operations.","reasoning":"These tools write new data and alter database state.","risk_type":"data_modification","severity":"medium","title":"Data and ingestion pipelines can be created","triggering_tools_or_skills":["create_ingestion_pipeline","create_ingestion_upload","commit_ingestion_upload","complete_ingestion_upload","submit_ingestion_rows"]},{"evidence":"Query results, schemas, and ingestion errors can include externally sourced free-form text.","reasoning":"Database content must be treated as untrusted model input.","risk_type":"prompt_injection_exposure","severity":"low","title":"Database rows and errors enter context","triggering_tools_or_skills":["execute_sql_query","describe_table","list_ingestion_run_errors"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication required for Loam Data tables and ingestion pipelines; database scope and SQL authorization boundaries are not specified in the packet.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/0467ee33-af64-45f6-8289-7d42a31c810b.json","what_it_proves":"Candidate PR #125 record identity (name \"Loam Data\", publisher, type web_connector) and 16 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/0467ee33-af64-45f6-8289-7d42a31c810b: complete tool_names inventory (16 tools), remote streamable-http endpoint https://www.loamdata.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Explicit execute_sql_query and execute_sql_mutation capabilities establish high-impact arbitrary query execution.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:0467ee33-af64-45f6-8289-7d42a31c810b","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 16 names. Runtime validation should establish SQL grammar limits, transaction behavior, deletion support, database boundaries, and upload-size controls.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"unknown","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":16,"tools_or_skills_total":16},"name":"Loam Data","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=0467ee33-af64-45f6-8289-7d42a31c810b&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.loamdata.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Shipit Software","publisher_url":"https://www.loamdata.com/","remote_url":"https://www.loamdata.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary query and mutation execution can expose or alter broad datasets, with deletion possible depending on SQL restrictions.","evidence":"Caller-supplied SQL can execute: The declared tools explicitly execute SQL queries and SQL mutations against authenticated Loam Data tables.","manual_risk_type":"query_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Caller-supplied SQL can execute","triggering_tools":["execute_sql_query","execute_sql_mutation"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools write new data and alter database state.","evidence":"Data and ingestion pipelines can be created: The inventory provides persistent pipeline creation and multiple upload or row-ingestion operations.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Data and ingestion pipelines can be created","triggering_tools":["create_ingestion_pipeline","create_ingestion_upload","commit_ingestion_upload","complete_ingestion_upload","submit_ingestion_rows"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://www.loamdata.com/help","tags":["modifies_data","network_access","oauth_required","runs_code","web_connector"],"tools":[{"description":"","name":"commit_ingestion_upload","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools write new data and alter database state."}},{"description":"","name":"complete_ingestion_upload","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools write new data and alter database state."}},{"description":"","name":"create_ingestion_pipeline","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools write new data and alter database state."}},{"description":"","name":"create_ingestion_upload","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools write new data and alter database state."}},{"description":"","name":"describe_table"},{"description":"","name":"execute_sql_mutation","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary query and mutation execution can expose or alter broad datasets, with deletion possible depending on SQL restrictions."}},{"description":"","name":"execute_sql_query","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary query and mutation execution can expose or alter broad datasets, with deletion possible depending on SQL restrictions."}},{"description":"","name":"get_ingestion_run"},{"description":"","name":"get_loam_help"},{"description":"","name":"get_sql_reference"},{"description":"","name":"list_ingestion_pipelines"},{"description":"","name":"list_ingestion_run_errors"},{"description":"","name":"list_tables"},{"description":"","name":"request_ingestion_upload_parts"},{"description":"","name":"submit_ingestion_rows","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools write new data and alter database state."}},{"description":"","name":"validate_sql"}],"tools_count":16,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/0467ee33-af64-45f6-8289-7d42a31c810b","uuid":"e5dd92ad-054b-5946-a7d1-61d8377e3f87","verification_tier":"community","version":""},"query_key":"shipit software loam data","schema_version":1,"status":"match"}