Claude security directory

dot.

Published by dot.

Medium risk

Build something in Claude. Get feedback in seconds. Say "add dot. feedback to my artifact" and Claude creates a shareable review link — anyone can click anywhere on the page to leave pinned comments. No deploy, no signup for reviewers, no switching tabs. Works with Claude artifacts, Vercel previews, Lovable, v0, or any URL. You can also ask Claude to check your feedback or list your projects without leaving the conversation.

Security assessment

Plutonium assessed this web connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: The connector can access project metadata and collected feedback, which may contain sensitive details about your work, URLs, or internal notes.
  • Sends your data to outside companies: Creating shareable review links may expose artifact/preview URLs and associated context to external reviewers and the dot. service.
  • Stores long-lived access tokens: To list projects and retrieve feedback across sessions, the connector likely relies on stored credentials/tokens, increasing impact if compromised.

Available capabilities

This add-on exposes 3 tools or capabilities.

  • create_review_link
  • list_projects
  • get_feedback

The interactive security report will load automatically.