{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-15","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"SubImage investigates cloud and SaaS security through your environment graph. Explore vulnerabilities, affected assets, exposure, ownership, and attack paths. Assign or snooze issues and create tenant-local rules or scenarios within your account.","did":"a76ec25f-6840-492a-b683-37ef98fda187","documentation_url":"https://docs.subimage.io/","editorial_description":{"extended_description":"Use Cypher and schema discovery to inspect relationships across connected providers, including AWS, GCP, Azure, GitHub, and Kubernetes. Examine package locations, fix availability, and remediation action items, or save reusable graph queries.","schema_version":1,"summary":"SubImage investigates cloud and SaaS security through your environment graph.\nExplore vulnerabilities, affected assets, exposure, ownership, and attack paths.\nAssign or snooze issues and create tenant-local rules or scenarios within your account."},"homepage_url":"","icon":"","id":"a76ec25f-6840-492a-b683-37ef98fda187","installs":0,"last_scanned":"","license":"","long_description":"Use Cypher and schema discovery to inspect relationships across connected providers, including AWS, GCP, Azure, GitHub, and Kubernetes. Examine package locations, fix availability, and remediation action items, or save reusable graph queries.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The explicit tool runs Cypher queries across cloud/SaaS assets.","reasoning":"Arbitrary graph-query execution is High.","risk_type":"query_execution","severity":"high","title":"Executes Cypher over the live security graph","triggering_tools_or_skills":["subimageRunCypher"]},{"evidence":"The tools persist triage/rule/simulation state.","reasoning":"They materially change security workflow configuration.","risk_type":"data_modification","severity":"medium","title":"Assigns/snoozes issues and creates rules/scenarios","triggering_tools_or_skills":["subimageAssignIssue","subimageSnoozeIssue","subimageCreateCustomRule","subimageCreateAttackPathScenario"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes the organization’s cloud/SaaS security graph.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/a76ec25f-6840-492a-b683-37ef98fda187.json","what_it_proves":"Candidate PR #125 record identity (name \"SubImage\", publisher, type web_connector) and 40 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/a76ec25f-6840-492a-b683-37ef98fda187: complete tool_names inventory (40 tools), remote streamable-http endpoint https://app.subimage.io/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"SubImage executes Cypher and changes security triage/rule state.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:a76ec25f-6840-492a-b683-37ef98fda187","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 40 tools; no remediation/deployment action is explicit.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":40,"tools_or_skills_total":40},"name":"SubImage","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=a76ec25f-6840-492a-b683-37ef98fda187&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.subimage.io/trust/privacy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"SubImage Inc","publisher_url":"https://subimage.io/","remote_url":"https://app.subimage.io/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary graph-query execution is High.","evidence":"Executes Cypher over the live security graph: The explicit tool runs Cypher queries across cloud/SaaS assets.","manual_risk_type":"query_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Executes Cypher over the live security graph","triggering_tools":["subimageRunCypher"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change security workflow configuration.","evidence":"Assigns/snoozes issues and creates rules/scenarios: The tools persist triage/rule/simulation state.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Assigns/snoozes issues and creates rules/scenarios","triggering_tools":["subimageAssignIssue","subimageSnoozeIssue","subimageCreateCustomRule","subimageCreateAttackPathScenario"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@subimage.io","tags":["modifies_data","network_access","oauth_required","runs_code","web_connector"],"tools":[{"description":"","name":"loadSubImageSkill"},{"description":"","name":"saveModelQuery"},{"description":"","name":"searchModelQueries"},{"description":"","name":"subimageAssignIssue","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change security workflow configuration."}},{"description":"","name":"subimageCreateAttackPathScenario","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change security workflow configuration."}},{"description":"","name":"subimageCreateCustomRule","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change security workflow configuration."}},{"description":"","name":"subimageEnrichIp"},{"description":"","name":"subimageGetAttackPathDetails"},{"description":"","name":"subimageGetAttackPathsFromAsset"},{"description":"","name":"subimageGetFrameworkHistory"},{"description":"","name":"subimageGetInventory"},{"description":"","name":"subimageGetIssue"},{"description":"","name":"subimageGetLabelStats"},{"description":"","name":"subimageGetNodesSchema"},{"description":"","name":"subimageGetPackageDetails"},{"description":"","name":"subimageGetPackageSummary"},{"description":"","name":"subimageGetRuleFindings"},{"description":"","name":"subimageGetRuleHistory"},{"description":"","name":"subimageGetScenarioCapabilities"},{"description":"","name":"subimageGetVulnerabilityActionItem"},{"description":"","name":"subimageGetVulnerabilityDetails"},{"description":"","name":"subimageGetVulnerabilitySummary"},{"description":"","name":"subimageListAttackPaths"},{"description":"","name":"subimageListCustomRules"},{"description":"","name":"subimageListFrameworks"},{"description":"","name":"subimageListInventories"},{"description":"","name":"subimageListIssues"},{"description":"","name":"subimageListModuleSchemaNodes"},{"description":"","name":"subimageListModules"},{"description":"","name":"subimageListPackageContainers"},{"description":"","name":"subimageListPackageRunningOn"},{"description":"","name":"subimageListPackages"},{"description":"","name":"subimageListRules"},{"description":"","name":"subimageListVulnerabilities"},{"description":"","name":"subimageListVulnerabilityActionItems"},{"description":"","name":"subimageListVulnerabilityContainers"},{"description":"","name":"subimageListVulnerabilityRunningOn"},{"description":"","name":"subimageReadMe"},{"description":"","name":"subimageRunCypher","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary graph-query execution is High."}},{"description":"","name":"subimageSnoozeIssue","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change security workflow configuration."}}],"tools_count":40,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/a76ec25f-6840-492a-b683-37ef98fda187","uuid":"0f7346fa-3a07-5ecc-ac9f-fd8d2612e6e5","verification_tier":"community","version":""},"query_key":"subimage inc subimage","schema_version":1,"status":"match"}