Claude security directory

Inkbox

Published by Inkbox

High risk

Inkbox gives an AI assistant its own communication identity: an email address, a phone number, SMS, and iMessage. Connect Inkbox and the assistant can search and read your mail, draft and send replies, keep threads organized, send and receive text and iMessage conversations, review call history and transcripts, and maintain a contact book and notes that carry context between conversations. Everything runs against a single identity you choose when you connect, and every action is scoped to that identity's own data. The assistant acts only when you ask it to: Inkbox does not watch your inbox in the background, wake the model, or send anything on its own. Note: Voice is not part of this connector. It cannot place, answer, or end calls, and it generates no audio or synthetic speech. Calls are read-only here; the assistant can review the history and text transcripts of calls that already took place.

Security assessment

Plutonium assessed this web connector for permissions, capabilities, and security-relevant behavior.

  • Can permanently delete data: This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.
  • Can send messages as you: This connector can post messages, emails, or chat replies on your behalf. Recipients will believe the message came from you, which makes phishing or social-engineering risks higher.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Sends your data to outside companies: Anything you share with this connector flows through one or more third-party services. Those companies see, store, and may use the data according to their own policies.

Available capabilities

This add-on exposes 59 tools or capabilities.

  • inkbox_call_get
  • inkbox_call_transcript_list
  • inkbox_calls_list
  • inkbox_channel_status_get
  • inkbox_contact_create
  • inkbox_contact_delete
  • inkbox_contact_get
  • inkbox_contact_lookup
  • inkbox_contact_rules_list
  • inkbox_contact_update
  • inkbox_contacts_list
  • inkbox_contacts_vcard_export
  • inkbox_contacts_vcard_import
  • inkbox_email_attachment_get
  • inkbox_email_attachment_upload
  • inkbox_email_delete
  • inkbox_email_flags_update
  • inkbox_email_forward
  • inkbox_email_get
  • inkbox_email_reply
  • inkbox_email_reply_all
  • inkbox_email_send
  • inkbox_email_thread_delete
  • inkbox_email_thread_get

The interactive security report will load automatically.