revcat-getting-started

SUSPICIOUS: the skill is internally coherent as a getting-started guide for a RevenueCat CLI, but it steers users to an unofficial personal-account tool and forwards RevenueCat credentials/tokens into that tool, including repo-local credential copies. This is not confirmed malware, but the install trust and credential-handling model are risky enough to treat as suspicious rather than benign.