{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-31","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"no_auth","catalog_reconciliation":{"basis":"Documented actions on the identified catalog surface; not an execution test.","confidence":"medium","evidence_completeness":"partial","previous":{"confidence":"low","detail_sha256":"96af5aa150fb43adbcd955eacfeb382c80d8bfc433c56431ac6af3df94f20fc9","risk":"high"},"proposal_file":"parent-proposals.json","rationale":"First pass Low unchanged. Displayed High rests only on a provisional 'unassessed' manual review whose open question was whether open_booking/tell_skym/choose_path book, pay or send. The publisher's MCP page (now skinow.co/mcp; 'Formerly Skimetric - renamed Skinow on 19 Sep 2026') states the server does not complete purchases: bookable items are attributed entry_url links, open_booking resolves a link and records the click, plan_trip/tell_skym create and message a trip on a random guest identity. No auth, no private data, no money movement. Only visible risk is Low. The page contains usage terms addressed to agents (present entry_url unmodified); treated as data.","review_key":"claudesec:60a9c520-3504-4113-93c6-4d17e648ffc9","reviewed_at":"2026-10-12","runtime_verified":false,"sources":["https://skimetric.eu/mcp","https://skinow.co/mcp","catalog-rating-review-2026-10-12/batches/batch-002.jsonl"],"status":"resolved"},"category":"Web Connector","confidence":"low","description":"Skimetric provides European ski conditions and trip planning. Explore snow forecasts, lift and piste status, resort history, webcams, routes, and trip costs. No account or API key is required; trips can be claimed through a link, with booking options using affiliate links.","did":"60a9c520-3504-4113-93c6-4d17e648ffc9","documentation_url":"https://skimetric.eu/mcp","editorial_description":{"extended_description":"Explore multi-model forecasts, historical snow by elevation, road or rail access, and travel, accommodation, or equipment costs. Refine trip options and reports through follow-up requests. Unverified operating status is identified as such.","schema_version":1,"summary":"Skimetric provides European ski conditions and trip planning.\nExplore snow forecasts, lift and piste status, resort history, webcams, routes, and trip costs.\nNo account or API key is required; trips can be claimed through a link, with booking options using affiliate links."},"homepage_url":"","icon":"","id":"60a9c520-3504-4113-93c6-4d17e648ffc9","installs":0,"last_scanned":"","license":"","long_description":"Explore multi-model forecasts, historical snow by elevation, road or rail access, and travel, accommodation, or equipment costs. Refine trip options and reports through follow-up requests. Unverified operating status is identified as such.","manual_assessment":"unassessed","manual_review":{"all_findings":[{"evidence":"The listing describes forecasts, lift status, resort history and trip planning, and these named tools retrieve those public resources.","reasoning":"The demonstrated portion of the connector is read-only travel research.","risk_type":"public_data_read","severity":"low","title":"Reads ski conditions and resort planning data","triggering_tools_or_skills":["conditions","daily_snow","find_resorts","snow_forecast","season_history","webcams"]}],"assessment_status":"provisional","auth_and_scopes":"The endpoint is no-auth, but the behavior of open_booking, tell_skym and choose_path is not documented in accessible official material.","blocked_missing_evidence":"Official tool descriptions and input schemas for open_booking, booking_options, choose_path and tell_skym, including whether any booking, message or browser action is executed.","confidence":"low","displayed_risk":"high","evidence_completeness":"insufficient","manual_overall_risk":"unassessed","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/60a9c520-3504-4113-93c6-4d17e648ffc9.json","what_it_proves":"Candidate PR #125 record identity (name \"Skimetric\", publisher, type web_connector) and 16 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/60a9c520-3504-4113-93c6-4d17e648ffc9: complete tool_names inventory (16 tools), remote streamable-http endpoint https://skimetric.eu/mcp, auth_posture no_auth, directory tier community"}],"primary_reason":"Most Skimetric tools are read-only, but open_booking and feedback/path actions are too ambiguous to exclude financial or external-send behavior.","provisional_risk":"high","publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:60a9c520-3504-4113-93c6-4d17e648ffc9","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 16 names. The official documentation URL was inaccessible. No account is required, but that does not prove open_booking merely returns a link; publication needs exact action semantics.","risk_domains":{"arbitrary_network_access":"unknown","authz_ambiguity":"false","browser_control":"unknown","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"unknown","persistent_credentials":"false","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"false","sends_messages_as_user":"unknown","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":16,"tools_or_skills_total":16},"name":"Skimetric","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=60a9c520-3504-4113-93c6-4d17e648ffc9&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://skimetric.eu/privacy","provisional_risk":"high","publication_recommendation":"fix","publisher":"Skimetric","publisher_url":"https://skimetric.eu/","remote_url":"https://skimetric.eu/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"The connector retrieves resort, weather and trip information. Booking tools provide links to partner sites; completing a purchase happens outside this connector.","evidence":"https://skinow.co/mcp\nTools section: Discovery/Weather/Operations/Travel/Content groups","risk_type":"reads_public_data","severity":"low","title":"Researches ski resorts and travel options"}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"contact@skimetric.eu","tags":["reads_public_data"],"tools":[{"description":"","name":"booking_options"},{"description":"","name":"choose_path"},{"description":"","name":"conditions"},{"description":"","name":"daily_snow"},{"description":"","name":"find_resorts"},{"description":"","name":"getting_there"},{"description":"","name":"open_booking"},{"description":"","name":"plan_trip"},{"description":"","name":"resort_media"},{"description":"","name":"season_history"},{"description":"","name":"snow_forecast"},{"description":"","name":"tell_skym"},{"description":"","name":"trip_costs"},{"description":"","name":"trip_status"},{"description":"","name":"webcams"},{"description":"","name":"where_to_ski"}],"tools_count":16,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/60a9c520-3504-4113-93c6-4d17e648ffc9","uuid":"34815c74-cddd-51b8-8cf1-be6b6eea3344","verification_tier":"community","version":""},"query_key":"skimetric skimetric","schema_version":1,"status":"match"}