revision-external-api
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, such as prompt injection or unauthorized code execution, were detected. The skill is designed for legitimate architecture management.- [COMMAND_EXECUTION]: The skill uses
curlcommands to interact with the Revision REST API. These operations are well-documented, standard for API clients, and used for their intended purpose.- [EXTERNAL_DOWNLOADS]: All network interactions target organization-specific subdomains ofrevision.app. This is a vendor-owned resource corresponding to the skill author 'revision-org'.- [DATA_EXFILTRATION]: The skill handles authentication by instructing the agent to request an API key and organization URL from the user. It does not attempt to access local sensitive files or exfiltrate data to unauthorized third-party services.- [PROMPT_INJECTION]: The skill processes component and diagram data from the Revision API, creating an indirect prompt injection surface. Ingestion points: GET endpoints for components and diagrams inOPENAPI.md. Boundary markers: Absent. Capability inventory:curlPOST/PATCH operations for data mutation inSKILL.md. Sanitization: Absent. This is considered standard behavior for an API integration tool.
Audit Metadata