revcat-troubleshooting

SUSPICIOUS. The skill’s troubleshooting scope mostly matches its stated purpose, and its data flows appear intended for RevenueCat use, but it centers on a `revcat` CLI that could not be verified as an official same-org RevenueCat tool. Because it also advises supplying refresh tokens and profile credentials to that CLI, the main risk is third-party credential exposure and supply-chain trust, not confirmed malware.