{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-04","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"SlideForge creates PowerPoint slides and decks with editable native shapes and text. Choose layouts, supply content, assemble themed decks, and translate presentations. Validation checks are free, while slide creation and transformation use paid usage allowances.","did":"570b507f-2df4-4b03-8625-813a94b042a5","documentation_url":"https://slideforge.dev/docs/mcp","editorial_description":{"extended_description":"The source describes field-level content-fidelity reports, pre-render dry runs, and isolated handling of failed slides. It also supports brand themes from uploaded PPTX files and conversion of PDFs or slide images into editable presentations.","schema_version":1,"summary":"SlideForge creates PowerPoint slides and decks with editable native shapes and text.\nChoose layouts, supply content, assemble themed decks, and translate presentations.\nValidation checks are free, while slide creation and transformation use paid usage allowances."},"homepage_url":"","icon":"","id":"570b507f-2df4-4b03-8625-813a94b042a5","installs":0,"last_scanned":"","license":"","long_description":"The source describes field-level content-fidelity reports, pre-render dry runs, and isolated handling of failed slides. It also supports brand themes from uploaded PPTX files and conversion of PDFs or slide images into editable presentations.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Generic manage_account tool has no documented action schema in the packet.","reasoning":"It may include billing, credential, or destructive actions.","risk_type":"generic_gateway","severity":"high","title":"Account management action set is hidden","triggering_tools_or_skills":["manage_account"]},{"evidence":"Tools persist presentation artifacts and uploaded files.","reasoning":"File/content creation is Medium.","risk_type":"file_write","severity":"medium","title":"Creates decks/slides and uploads assets","triggering_tools_or_skills":["create_deck","create_slide","upload_asset"]},{"evidence":"Remote hosted implementation is unpinned.","reasoning":"Runtime capability may drift.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/570b507f-2df4-4b03-8625-813a94b042a5.json","what_it_proves":"Candidate PR #125 record identity (name \"SlideForge\", publisher, type web_connector) and 7 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/570b507f-2df4-4b03-8625-813a94b042a5: complete tool_names inventory (7 tools), remote streamable-http endpoint https://api.slideforge.dev/mcp-connectors, auth_posture auth_required, publisher-declared permissions text, directory tier community"}],"primary_reason":"SlideForge has an opaque account-management gateway alongside deck creation and uploads.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:570b507f-2df4-4b03-8625-813a94b042a5","reviewed_at":"2026-10-10","reviewer_notes":"All seven names reviewed; manage_account operation schema and any credit/billing behavior are required.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"unknown","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":7,"tools_or_skills_total":7},"name":"SlideForge","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=570b507f-2df4-4b03-8625-813a94b042a5&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://slideforge.dev/privacy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Smart Data Brokers GmbH","publisher_url":"https://slideforge.dev/","remote_url":"https://api.slideforge.dev/mcp-connectors","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: It may include billing, credential, or destructive actions.","evidence":"Account management action set is hidden: Generic manage_account tool has no documented action schema in the packet.","manual_risk_type":"generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Account management action set is hidden","triggering_tools":["manage_account"]},{"description":"This connector can create, change, export, or otherwise write files. Review findings: File/content creation is Medium.","evidence":"Creates decks/slides and uploads assets: Tools persist presentation artifacts and uploaded files.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Creates decks/slides and uploads assets","triggering_tools":["create_deck","create_slide","upload_asset"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hello@slideforge.dev","tags":["filesystem_access","network_access","oauth_required","runs_code","web_connector"],"tools":[{"description":"","name":"browse_catalog"},{"description":"","name":"create_deck","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: File/content creation is Medium."}},{"description":"","name":"create_slide","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: File/content creation is Medium."}},{"description":"","name":"manage_account","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: It may include billing, credential, or destructive actions."}},{"description":"","name":"plan_slide"},{"description":"","name":"translate_deck"},{"description":"","name":"upload_asset","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: File/content creation is Medium."}}],"tools_count":7,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/570b507f-2df4-4b03-8625-813a94b042a5","uuid":"17617407-d82a-5a95-871e-4d1af2ad620a","verification_tier":"community","version":""},"query_key":"slideforge","schema_version":1,"status":"match"}