{"generated_at":"2026-08-17T10:36:11+00:00","item":{"added_at":"2026-04-24","analysis_method":"capability_triage","category":"Web Connector","description":"Search Splice samples, build sample stacks, and share them publicly. Downloads use plan credits; shares produce public links.","did":"splice","homepage_url":"","icon":"https://splice.com/favicon.ico","id":"splice","installs":0,"last_scanned":"","license":"","long_description":"Provides discovery and ideation tools backed by Splice's catalog of royalty-free samples. Describe a Sound (Beta) finds samples by natural-language search; Create builds collections of compatible samples; Share generates a public link to a stack you've assembled.\n\nDownloads consume your Splice plan's sample credits; Share generates a public URL that anyone with the link can view.","name":"Splice","plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=splice&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","publisher":"Splice","publisher_url":"https://splice.com","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.","evidence":"2 state change tools on this connector - e.g. create_stack, download_asset.","remediation":{"block_tool_categories":["state_change"],"steps":["Try the connector on a test account first to see what it changes before letting it touch your real records.","Where the connected service supports it, give Claude read-only access and only allow writes for the specific things you need updated.","In the tools list below, turn off any tool you don't actively need - the ones tagged Block are the most important to disable."]},"risk_type":"modifies_data","severity":"low","title":"Can change or update your information"},{"description":"This connector can post, message, or share content on your behalf. A manipulated request could send unintended communications to your contacts or public audiences.","evidence":"1 outbound-message tools on this connector - e.g. share_stack.","remediation":{"block_tool_categories":["sends_externally"],"steps":["In the tools list below, turn off any tool tagged Block unless you explicitly need Claude to send messages on your behalf.","Consider using a dedicated account for the connector so messages don't appear to come from your main identity.","Where the service supports it, require manual review before any outbound message is sent."]},"risk_type":"sends_messages_as_you","severity":"low","title":"Sends messages or shares content as you"},{"description":"This connector can trigger purchases, license paid assets, or burn credits on your account. A manipulated request could spend funds without your direct approval.","evidence":"Tools that may trigger paid actions - e.g. download_asset.","remediation":{"block_tool_categories":[],"steps":["Use a billing account or credit allowance you're comfortable burning - not your main payment method.","Set a low spending cap on the connected service if it offers one.","In the tools list below, turn off any tool tagged Block that triggers paid downloads or licensing."]},"risk_type":"spends_money","severity":"low","title":"Can spend money or use paid credits"}],"signature_status":"unknown","source_code_reviewed":false,"tags":["web_connector","creative_tools","music"],"tools":[{"description":"","name":"describe_a_sound"},{"description":"","name":"create_stack","risk":{"category":"state_change","level":"medium","recommendation":"Allow only for low-stakes resources; require approval for production data changes.","why":"Creates, modifies, or uploads data on the connected service. Hijacking the tool can pollute records, plant content, or create rogue resources that bill the user."}},{"description":"","name":"prompt_to_stack"},{"description":"","name":"share_stack","risk":{"category":"sends_externally","level":"high","recommendation":"Restrict recipients to an allowlist; require human approval for outbound messages.","why":"Sends content to people or systems outside your organization. A manipulated prompt could leak data or send messages on your behalf."}},{"description":"","name":"download_asset","risk":{"category":"state_change","level":"medium","recommendation":"Allow only for low-stakes resources; require approval for production data changes.","why":"Creates, modifies, or uploads data on the connected service. Hijacking the tool can pollute records, plant content, or create rogue resources that bill the user."}}],"tools_count":5,"type":"web_connector","url":"https://claude.ai/directory/0c501c77-e4a2-40a6-8fe9-f386595a7976","uuid":"0c501c77-e4a2-40a6-8fe9-f386595a7976","version":""},"query_key":"splice splice","schema_version":1,"status":"match"}