{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-20","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Publish drafts to Google Docs for review with Strunk. Pull comments with their quoted spans, draft revisions, and apply approved targeted edits. Reply to or resolve threads while Google Docs remains the source of truth.","did":"dd21294e-2905-442b-a615-c85d5a5fa12b","documentation_url":"https://strunk.io/docs","editorial_description":{"extended_description":"Inspect a selected document, preserve existing comment anchors when applying revisions, and manage workflow preferences between your drafting environment and reviewers' documents.","schema_version":1,"summary":"Publish drafts to Google Docs for review with Strunk.\nPull comments with their quoted spans, draft revisions, and apply approved targeted edits.\nReply to or resolve threads while Google Docs remains the source of truth."},"homepage_url":"","icon":"https://strunk.io/brand/strunk-icon-512.png","id":"dd21294e-2905-442b-a615-c85d5a5fa12b","installs":0,"last_scanned":"","license":"","long_description":"Inspect a selected document, preserve existing comment anchors when applying revisions, and manage workflow preferences between your drafting environment and reviewers' documents.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The connector description explicitly publishes documents and replies to reviewer threads.","reasoning":"This communicates externally as the user in a collaborative document.","risk_type":"messaging_as_user","severity":"high","title":"Drafts and comment replies can be published to Google Docs","triggering_tools_or_skills":["publish_doc","reply_comment"]},{"evidence":"Tools edit anchored document spans and resolve threads.","reasoning":"They materially change collaborative content/state.","risk_type":"data_modification","severity":"medium","title":"Approved revisions and comment state can be changed","triggering_tools_or_skills":["apply_revisions","resolve_comment","set_preferences"]},{"evidence":"The provider is a document store and these tools write content.","reasoning":"Sensitive specifications may be changed.","risk_type":"file_write","severity":"medium","title":"Google Docs can be created or overwritten with revisions","triggering_tools_or_skills":["publish_doc","apply_revisions"]},{"evidence":"Human-authored documents/comments are returned.","reasoning":"They may contain prompt injection.","risk_type":"prompt_injection_exposure","severity":"low","title":"Reviewer comments and document content enter model context","triggering_tools_or_skills":["inspect_doc","pull_comments"]},{"evidence":"The connector runs at https://strunk.io/mcp without a pinned server implementation in the packet.","reasoning":"The implementation can change independently, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Strunk is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth connects selected Google Docs under the user's Google permissions; exact Drive scopes and comment-resolution roles are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/dd21294e-2905-442b-a615-c85d5a5fa12b.json","what_it_proves":"Candidate PR #125 record identity (name \"Strunk\", publisher, type web_connector) and 11 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/dd21294e-2905-442b-a615-c85d5a5fa12b: complete tool_names inventory (11 tools), remote streamable-http endpoint https://strunk.io/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Strunk publishes Google Docs and replies to reviewer comments as the user.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:dd21294e-2905-442b-a615-c85d5a5fa12b","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 11 tools. Runtime verification should confirm whether publish_doc creates new docs, updates existing docs, or changes sharing.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":11,"tools_or_skills_total":11},"name":"Strunk","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=dd21294e-2905-442b-a615-c85d5a5fa12b&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://strunk.io/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Strunk","publisher_url":"https://strunk.io/","remote_url":"https://strunk.io/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates externally as the user in a collaborative document.","evidence":"Drafts and comment replies can be published to Google Docs: The connector description explicitly publishes documents and replies to reviewer threads.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Drafts and comment replies can be published to Google Docs","triggering_tools":["publish_doc","reply_comment"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change collaborative content/state.","evidence":"Approved revisions and comment state can be changed: Tools edit anchored document spans and resolve threads.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Approved revisions and comment state can be changed","triggering_tools":["apply_revisions","resolve_comment","set_preferences"]},{"description":"This connector can create, change, export, or otherwise write files. Review findings: Sensitive specifications may be changed.","evidence":"Google Docs can be created or overwritten with revisions: The provider is a document store and these tools write content.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Google Docs can be created or overwritten with revisions","triggering_tools":["publish_doc","apply_revisions"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@strunk.io","tags":["filesystem_access","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"apply_revisions","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: Sensitive specifications may be changed."}},{"description":"","name":"get_preferences"},{"description":"","name":"get_version"},{"description":"","name":"get_workflow"},{"description":"","name":"inspect_doc"},{"description":"","name":"pick_google_doc"},{"description":"","name":"publish_doc","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates externally as the user in a collaborative document."}},{"description":"","name":"pull_comments"},{"description":"","name":"reply_comment","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates externally as the user in a collaborative document."}},{"description":"","name":"resolve_comment","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change collaborative content/state."}},{"description":"","name":"set_preferences","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change collaborative content/state."}}],"tools_count":11,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/dd21294e-2905-442b-a615-c85d5a5fa12b","uuid":"b1953416-0073-54c4-a593-0b6c869217c2","verification_tier":"community","version":""},"query_key":"strunk","schema_version":1,"status":"match"}