{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-07","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Builds and manages Supademo interactive product demos. Edit steps, hotspots and chapters, generate voiceovers or translations, and organize content. Create Demo Hubs or Showcases and inspect engagement, sessions and sharing activity.","did":"b93da22d-4713-471f-b739-4613d9d1c23b","documentation_url":"https://docs.supademo.com/","editorial_description":{"extended_description":"Tools manage trackable links, branding, backgrounds, tags and folders, and import or copy steps between demos. Analytics covers views, device breakdowns and hotspot performance. Demo components, translations, voiceovers, folders and collections can also be deleted.","schema_version":1,"summary":"Builds and manages Supademo interactive product demos.\nEdit steps, hotspots and chapters, generate voiceovers or translations, and organize content.\nCreate Demo Hubs or Showcases and inspect engagement, sessions and sharing activity."},"homepage_url":"","icon":"https://supademo.com/supademo_logo_icon.svg","id":"b93da22d-4713-471f-b739-4613d9d1c23b","installs":0,"last_scanned":"","license":"","long_description":"Tools manage trackable links, branding, backgrounds, tags and folders, and import or copy steps between demos. Analytics covers views, device breakdowns and hotspot performance. Demo components, translations, voiceovers, folders and collections can also be deleted.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory contains deletion tools for demo hubs, showcases, steps, folders, voiceovers, translations, chapters and hotspots.","reasoning":"These can permanently remove meaningful product-demo content.","risk_type":"data_deletion","severity":"high","title":"Deletes demos and content components","triggering_tools_or_skills":["delete_demo_hub","delete_showcase","delete_steps","delete_folder","delete_voiceover","delete_demo_translation"]},{"evidence":"Named tools create, import, merge, move and update persistent demos and showcases.","reasoning":"The operations materially modify shared marketing/product content.","risk_type":"data_modification","severity":"medium","title":"Creates and reorganizes interactive demos","triggering_tools_or_skills":["create_demo_from_uploaded_media","create_demo_hub","create_showcase","create_steps","import_showcase","merge_demos","move_demos","update_steps"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; workspace roles, deletion recovery and sharing permissions are unspecified.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/b93da22d-4713-471f-b739-4613d9d1c23b.json","what_it_proves":"Candidate PR #125 record identity (name \"Supademo\", publisher, type web_connector) and 75 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/b93da22d-4713-471f-b739-4613d9d1c23b: complete tool_names inventory (75 tools), remote streamable-http endpoint https://mcp.supademo.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Supademo can delete complete demos/hubs and many constituent assets.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:b93da22d-4713-471f-b739-4613d9d1c23b","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 75 tools. No external publication/send tool is named, but share/embed settings should be checked at runtime for visibility changes.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":75,"tools_or_skills_total":75},"name":"Supademo","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=b93da22d-4713-471f-b739-4613d9d1c23b&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://supademo.com/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Supademo Inc","publisher_url":"https://supademo.com/","remote_url":"https://mcp.supademo.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These can permanently remove meaningful product-demo content.","evidence":"Deletes demos and content components: The inventory contains deletion tools for demo hubs, showcases, steps, folders, voiceovers, translations, chapters and hotspots.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes demos and content components","triggering_tools":["delete_demo_hub","delete_showcase","delete_steps","delete_folder","delete_voiceover","delete_demo_translation"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: The operations materially modify shared marketing/product content.","evidence":"Creates and reorganizes interactive demos: Named tools create, import, merge, move and update persistent demos and showcases.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates and reorganizes interactive demos","triggering_tools":["create_demo_from_uploaded_media","create_demo_hub","create_showcase","create_steps","import_showcase","merge_demos","move_demos","update_steps"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@supademo.com","tags":["deletes_data","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"copy_steps"},{"description":"","name":"create_demo_from_uploaded_media","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: The operations materially modify shared marketing/product content."}},{"description":"","name":"create_demo_hub","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: The operations materially modify shared marketing/product content."}},{"description":"","name":"create_demo_hub_from_showcase"},{"description":"","name":"create_folder"},{"description":"","name":"create_hotspots"},{"description":"","name":"create_showcase","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: The operations materially modify shared marketing/product content."}},{"description":"","name":"create_step_from_media_library_item"},{"description":"","name":"create_steps","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: The operations materially modify shared marketing/product content."}},{"description":"","name":"create_upload_job"},{"description":"","name":"delete_chapters"},{"description":"","name":"delete_demo_hub","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These can permanently remove meaningful product-demo content."}},{"description":"","name":"delete_demo_translation","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These can permanently remove meaningful product-demo content."}},{"description":"","name":"delete_folder","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These can permanently remove meaningful product-demo content."}},{"description":"","name":"delete_hotspots"},{"description":"","name":"delete_showcase","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These can permanently remove meaningful product-demo content."}},{"description":"","name":"delete_steps","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These can permanently remove meaningful product-demo content."}},{"description":"","name":"delete_voiceover","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These can permanently remove meaningful product-demo content."}},{"description":"","name":"duplicate_demo"},{"description":"","name":"duplicate_demo_hub"},{"description":"","name":"duplicate_showcase"},{"description":"","name":"generate_demo_translation"},{"description":"","name":"generate_voiceovers"},{"description":"","name":"get_demo"},{"description":"","name":"get_demo_analytics"},{"description":"","name":"get_demo_embed_code"},{"description":"","name":"get_demo_hotspot_performance"},{"description":"","name":"get_demo_hub"},{"description":"","name":"get_demo_hub_embed_code"},{"description":"","name":"get_demo_sessions"},{"description":"","name":"get_device_analytics"},{"description":"","name":"get_showcase"},{"description":"","name":"get_showcase_analytics"},{"description":"","name":"get_showcase_demo_performance"},{"description":"","name":"get_showcase_session_details"},{"description":"","name":"get_showcase_sessions"},{"description":"","name":"get_showcase_share_info"},{"description":"","name":"get_top_performing_demos"},{"description":"","name":"get_top_performing_showcases"},{"description":"","name":"get_upload_job"},{"description":"","name":"get_workspace_settings"},{"description":"","name":"import_showcase","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: The operations materially modify shared marketing/product content."}},{"description":"","name":"list_background_music"},{"description":"","name":"list_demo_hubs"},{"description":"","name":"list_demo_translations"},{"description":"","name":"list_demos"},{"description":"","name":"list_folders"},{"description":"","name":"list_media_library_items"},{"description":"","name":"list_showcase_analytics_sources"},{"description":"","name":"list_showcases"},{"description":"","name":"list_tags"},{"description":"","name":"list_voices"},{"description":"","name":"list_workspaces"},{"description":"","name":"manage_demo_hub_categories"},{"description":"","name":"manage_demo_hub_content"},{"description":"","name":"manage_links"},{"description":"","name":"manage_showcase_content"},{"description":"","name":"manage_showcase_links"},{"description":"","name":"manage_showcase_sections"},{"description":"","name":"manage_tags"},{"description":"","name":"merge_demos","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: The operations materially modify shared marketing/product content."}},{"description":"","name":"move_demos","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: The operations materially modify shared marketing/product content."}},{"description":"","name":"move_showcases"},{"description":"","name":"rename_folder"},{"description":"","name":"reorder_steps"},{"description":"","name":"replace_step_media"},{"description":"","name":"set_demo_tags"},{"description":"","name":"set_demo_translation_text"},{"description":"","name":"set_showcase_tags"},{"description":"","name":"update_chapters"},{"description":"","name":"update_demo_hub_settings"},{"description":"","name":"update_demo_settings"},{"description":"","name":"update_hotspots"},{"description":"","name":"update_showcase_settings"},{"description":"","name":"update_steps","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: The operations materially modify shared marketing/product content."}}],"tools_count":75,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/b93da22d-4713-471f-b739-4613d9d1c23b","uuid":"7a9f0a73-a607-5f47-8562-c1381dd8520b","verification_tier":"community","version":""},"query_key":"supademo inc supademo","schema_version":1,"status":"match"}