intranet

SUSPICIOUS: the stated purpose and core capabilities are mostly coherent, and the Claude API usage is proportionate and officially aligned. The main risk is broad aggregation of sensitive business documents plus optional MCP-server routing with unspecified provenance and trust, which creates unclear third-party data exposure and execution boundaries.