Cold Email Prospecting Agent
PassAudited by ClawScan on May 10, 2026.
Overview
This is a disclosed RevoScale prospecting skill, but it uses a third-party API and an API key to look up personal contact details, so users should review privacy and credential handling before use.
Install only if you intend to use RevoScale for sales prospecting, are comfortable sending names, company domains, LinkedIn URLs, and email addresses to that provider, and can comply with applicable privacy, consent, and outreach rules. Protect the REVOSCALE_API_KEY and verify the full installed SKILL.md because the supplied review excerpt is truncated.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone using the skill must provide a RevoScale API key, and API calls may be billed or attributed to that account depending on the provider's terms.
The skill authenticates requests with the user's RevoScale API key. This is expected for the advertised provider integration, but the key grants account-level API use and should be protected.
All API calls require a RevoScale API key in the `x-api-key` header. `x-api-key: {{REVOSCALE_API_KEY}}`Use a dedicated RevoScale key if possible, keep it out of chat logs and shared files, and revoke or rotate it if no longer needed.
Prospect data and lookup results may be processed by RevoScale, and the results can include sensitive personal contact information such as personal emails and mobile numbers.
The skill sends user-provided prospect identifiers such as LinkedIn URLs, names, company domains, or email addresses to a third-party provider and returns personal contact details.
Personal Email Finder | `/api/v1/personal-email-finder` | LinkedIn URL | Personal emails ... Mobile Phone Finder | `/api/v1/mobile-phone-finder` | LinkedIn URL | Phone number
Only submit contacts you are allowed to process, review RevoScale's privacy and compliance terms, and avoid using the skill for prohibited or non-consensual outreach.
Users have limited independent package provenance information from the registry metadata.
The registry metadata does not provide a source repository or homepage for package provenance, although the skill itself links to RevoScale and contains no executable code.
Source: unknown; Homepage: none
Verify the provider and package owner before installing, and confirm the API endpoints and key instructions match RevoScale's official documentation.