revor-company-discovery
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches company data and account information from the Revor API (revor.ai).
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes external lead data and matching reasons from Revor Websets. 1. Ingestion points: Data enters the agent context via the scripts/revor-websets.mjs client which fetches results from revor.ai. 2. Boundary markers: Instructions mandate a structured markdown table for results and warn the agent not to hallucinate source-level evidence not provided by the API. 3. Capability inventory: The skill uses a bundled Node.js script for network communication and configuration file management. 4. Sanitization: The script implements input validation for query character limits, result count boundaries, and UUID format verification.
- [SAFE]: No malicious patterns or security vulnerabilities were identified. The implementation follows standard service integration patterns.
Audit Metadata