{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-27","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Plan and manage social content in Social Champ from Claude. Draft, schedule and update posts, organize media and maintain publishing queues. Handle approvals and calendars only for the workspaces and channels you authorize.","did":"c99325b0-76ec-4836-95eb-d4fda76993d7","documentation_url":"https://help.socialchamp.com/","editorial_description":{"extended_description":"Tools support bulk scheduling, labels and deletion, as well as pausing, reordering or clearing queues. You can generate or rewrite post text, upload media, approve or reject items and create shareable calendar links.","schema_version":1,"summary":"Plan and manage social content in Social Champ from Claude.\nDraft, schedule and update posts, organize media and maintain publishing queues.\nHandle approvals and calendars only for the workspaces and channels you authorize."},"homepage_url":"","icon":"","id":"c99325b0-76ec-4836-95eb-d4fda76993d7","installs":0,"last_scanned":"","license":"","long_description":"Tools support bulk scheduling, labels and deletion, as well as pausing, reordering or clearing queues. You can generate or rewrite post text, upload media, approve or reject items and create shareable calendar links.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory exposes post creation, bulk scheduling and Instagram first-comment actions across connected channels.","reasoning":"Publishing or scheduling social content acts externally as the user and is High impact.","risk_type":"messaging_as_user","severity":"high","title":"Social posts can be created and scheduled","triggering_tools_or_skills":["create_image_post","create_text_post","bulk_schedule","recycle_post","instagram_first_comment"]},{"evidence":"The declared actions explicitly delete posts/calendars and clear queues.","reasoning":"These actions destructively remove scheduled content or shared calendars.","risk_type":"data_deletion","severity":"high","title":"Posts and queued content can be deleted","triggering_tools_or_skills":["delete_post","bulk_delete","queue_clear","delete_shareable_calendar"]},{"evidence":"The inventory declares workflow and content mutation actions.","reasoning":"They persist operational changes in the social workspace.","risk_type":"data_modification","severity":"medium","title":"Approvals, queues, labels and posts can be changed","triggering_tools_or_skills":["approval_approve","approval_reject","queue_pause","queue_reorder","update_post","label_apply"]},{"evidence":"The connector runs at https://mcp.socialchamp.com/mcp/claude without a pinned server implementation in the packet.","reasoning":"The hosted implementation and tool behavior can change independently of this snapshot, so monitoring and runtime verification remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Social Champ is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication limits actions to authorized Social Champ workspaces and connected social channels; exact scopes are not listed.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/c99325b0-76ec-4836-95eb-d4fda76993d7.json","what_it_proves":"Candidate PR #125 record identity (name \"Social Champ\", publisher, type web_connector) and 43 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/c99325b0-76ec-4836-95eb-d4fda76993d7: complete tool_names inventory (43 tools), remote streamable-http endpoint https://mcp.socialchamp.com/mcp/claude, auth_posture auth_required, directory tier community"}],"primary_reason":"Social Champ can publish social content and destructively clear or delete scheduled resources.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:c99325b0-76ec-4836-95eb-d4fda76993d7","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 43 tools. The High behavior follows unambiguous names; no schemas were available.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":43,"tools_or_skills_total":43},"name":"Social Champ","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=c99325b0-76ec-4836-95eb-d4fda76993d7&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.socialchamp.com/privacy-policy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Social Champ","publisher_url":"https://www.socialchamp.com/","remote_url":"https://mcp.socialchamp.com/mcp/claude","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Publishing or scheduling social content acts externally as the user and is High impact.","evidence":"Social posts can be created and scheduled: The inventory exposes post creation, bulk scheduling and Instagram first-comment actions across connected channels.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Social posts can be created and scheduled","triggering_tools":["create_image_post","create_text_post","bulk_schedule","recycle_post","instagram_first_comment"]},{"description":"This connector can permanently remove data or resources. Review findings: These actions destructively remove scheduled content or shared calendars.","evidence":"Posts and queued content can be deleted: The declared actions explicitly delete posts/calendars and clear queues.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Posts and queued content can be deleted","triggering_tools":["delete_post","bulk_delete","queue_clear","delete_shareable_calendar"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist operational changes in the social workspace.","evidence":"Approvals, queues, labels and posts can be changed: The inventory declares workflow and content mutation actions.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Approvals, queues, labels and posts can be changed","triggering_tools":["approval_approve","approval_reject","queue_pause","queue_reorder","update_post","label_apply"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://www.socialchamp.com/contact-us/","tags":["accesses_calendar","accesses_messaging","deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"approval_approve","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist operational changes in the social workspace."}},{"description":"","name":"approval_assign"},{"description":"","name":"approval_list_pending"},{"description":"","name":"approval_reject","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist operational changes in the social workspace."}},{"description":"","name":"bulk_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions destructively remove scheduled content or shared calendars."}},{"description":"","name":"bulk_label"},{"description":"","name":"bulk_schedule","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Publishing or scheduling social content acts externally as the user and is High impact."}},{"description":"","name":"complete_media_upload"},{"description":"","name":"create_image_post","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Publishing or scheduling social content acts externally as the user and is High impact."}},{"description":"","name":"create_media_upload"},{"description":"","name":"create_public_calendar_link"},{"description":"","name":"create_text_post","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Publishing or scheduling social content acts externally as the user and is High impact."}},{"description":"","name":"delete_post","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions destructively remove scheduled content or shared calendars."}},{"description":"","name":"delete_shareable_calendar","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions destructively remove scheduled content or shared calendars."}},{"description":"","name":"generate_post"},{"description":"","name":"get_calendar_view_options"},{"description":"","name":"get_channel"},{"description":"","name":"get_channels"},{"description":"","name":"get_filtered_channels"},{"description":"","name":"get_in_app_calendar_url"},{"description":"","name":"get_paginated_posts"},{"description":"","name":"get_posts_for_channels"},{"description":"","name":"get_posts_with_assets"},{"description":"","name":"get_scheduled_posts"},{"description":"","name":"get_shareable_calendars"},{"description":"","name":"get_workspaces"},{"description":"","name":"import_media_from_url"},{"description":"","name":"instagram_first_comment","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Publishing or scheduling social content acts externally as the user and is High impact."}},{"description":"","name":"label_apply","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist operational changes in the social workspace."}},{"description":"","name":"label_create"},{"description":"","name":"label_list"},{"description":"","name":"label_remove"},{"description":"","name":"list_collections"},{"description":"","name":"location_search"},{"description":"","name":"queue_clear","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions destructively remove scheduled content or shared calendars."}},{"description":"","name":"queue_pause","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist operational changes in the social workspace."}},{"description":"","name":"queue_reorder","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist operational changes in the social workspace."}},{"description":"","name":"queue_resume"},{"description":"","name":"recycle_post","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Publishing or scheduling social content acts externally as the user and is High impact."}},{"description":"","name":"rewrite"},{"description":"","name":"suggest_hashtags"},{"description":"","name":"update_post","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist operational changes in the social workspace."}},{"description":"","name":"update_shareable_calendar"}],"tools_count":43,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/c99325b0-76ec-4836-95eb-d4fda76993d7","uuid":"2e79419b-dc10-5609-a5ec-679feed15f64","verification_tier":"community","version":""},"query_key":"social champ social champ","schema_version":1,"status":"match"}