✓
Third-party audit

Gen Agent Trust Hub

actions · revosai/skills

Passed
Provider summary

The skill is designed for debugging and managing integration actions via a RevOS MCP server. It is generally safe but contains a surface for indirect prompt injection because it reads and follows instructions from external sources (organization-specific documentation) and interprets error messages from third-party integrations (like HubSpot or NetSuite). This could allow specially crafted external content to influence the agent's behavior, particularly when triggering write operations to connected CRM/ERP systems.

The provider classified the analyzed snapshot as NONE risk. This result applies to the content available at audit time.

Provider
Gen Agent Trust Hub
Normalized result
pass
Risk level
NONE
Audited
Oct 05, 2026
Interpretation

How to use this signal

01

Confirm the source

Compare the repository, publisher, and installation command before continuing.

02

Read the content

Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.

03

Limit permissions

Use the narrowest possible scope and avoid broad credentials for third-party skills.