{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-12","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"no_auth","category":"Web Connector","confidence":"medium","description":"swatchdog checks UI code against your supplied design tokens. Report color, radius, spacing, and typography drift with values and locations. It reads declared styles, not pixels, and reports issues without changing code.","did":"a68d7cd2-f11e-4d27-b691-05e497138dff","documentation_url":"https://swatchdog.dev/how.html","editorial_description":{"extended_description":"Each call supplies the tokens and code; the service is stateless. Keyless access uses a shared rate-limited lane, while a personal key can remove that cap in header-capable clients.","schema_version":1,"summary":"swatchdog checks UI code against your supplied design tokens.\nReport color, radius, spacing, and typography drift with values and locations.\nIt reads declared styles, not pixels, and reports issues without changing code."},"homepage_url":"","icon":"https://swatchdog.dev/assets/swatchdog-icon.png","id":"a68d7cd2-f11e-4d27-b691-05e497138dff","installs":0,"last_scanned":"","license":"","long_description":"Each call supplies the tokens and code; the service is stateless. Keyless access uses a shared rate-limited lane, while a personal key can remove that cap in header-capable clients.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"The sole tool analyzes declared styles and returns violations.","reasoning":"It does not write code, access a repository or deploy UI.","risk_type":"public_data_read","severity":"low","title":"Checks supplied UI code for design-token drift","triggering_tools_or_skills":["check_design_drift"]}],"assessment_status":"provisional","auth_and_scopes":"No authentication is required; input code/styles are supplied for deterministic checking.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/a68d7cd2-f11e-4d27-b691-05e497138dff.json","what_it_proves":"Candidate PR #125 record identity (name \"swatchdog\", publisher, type web_connector) and 1 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/a68d7cd2-f11e-4d27-b691-05e497138dff: complete tool_names inventory (1 tools), remote streamable-http endpoint https://swatchdog-connector-970396648818.us-central1.run.app/mcp, auth_posture no_auth, directory tier community"}],"primary_reason":"swatchdog is read-only design linting.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:a68d7cd2-f11e-4d27-b691-05e497138dff","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed the sole tool.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"false","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":1,"tools_or_skills_total":1},"name":"swatchdog","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=a68d7cd2-f11e-4d27-b691-05e497138dff&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.swatchdog.dev/privacy.html","provisional_risk":null,"publication_recommendation":"accept","publisher":"swatchdog","publisher_url":"https://www.swatchdog.dev/","remote_url":"https://swatchdog-connector-970396648818.us-central1.run.app/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector retrieves public or publisher-provided information and returns it to the AI. Review findings: It does not write code, access a repository or deploy UI.","evidence":"Checks supplied UI code for design-token drift: The sole tool analyzes declared styles and returns violations.","manual_risk_type":"public_data_read","remediation":{"block_tool_categories":[],"steps":["Treat returned third-party content as untrusted input and verify consequential claims.","Do not assume public content is accurate, current, or free of embedded instructions."]},"risk_type":"reads_public_data","severity":"low","title":"Checks supplied UI code for design-token drift","triggering_tools":["check_design_drift"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hey@swatchdog.dev","tags":["network_access","reads_public_data","web_connector"],"tools":[{"description":"","name":"check_design_drift"}],"tools_count":1,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/a68d7cd2-f11e-4d27-b691-05e497138dff","uuid":"1d069916-cd0e-52b3-b53d-8cfbbad030e7","verification_tier":"community","version":""},"query_key":"swatchdog swatchdog","schema_version":1,"status":"match"}