revor-company-research

SUSPICIOUS: The research purpose and Revor data flows are mostly coherent and use official Revor endpoints, so this does not look like confirmed malware. But the skill’s explicit instruction to solicit an API key in chat and write it to persistent local config is disproportionate and contrary to safer auth practices, and the fallback client script was not available for review. Overall this is a medium-risk skill with notable credential-handling concerns, not a clearly benign documentation-style integration.