subscription-app-revenue
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes dynamic context injection (
!commandsyntax) inSKILL.mdto execute shell commands at load time. - One command uses
nodeto parsepackage.jsonfor specific dependencies related to the Capacitor ecosystem and various billing/analytics SDKs (e.g., Stripe, RevenueCat, PostHog). - Another command uses
findto map out relevant configuration files and native directories. - [DATA_EXFILTRATION]: No network exfiltration or credential harvesting patterns were detected. The data collected by the dynamic context commands remains within the local execution environment for the agent's use.
- [PROMPT_INJECTION]: The instructions are instructional and safe. No attempts to bypass safety filters or override system behavior were found.
- [REMOTE_CODE_EXECUTION]: No patterns of downloading or executing remote code from external sources were identified.
Audit Metadata