revenuecat-manager
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts with the official RevenueCat REST API and Dashboard. All network operations target well-known RevenueCat domains (
revenuecat.com) for the purpose of managing IAP resources. - [SAFE]: Credential discovery instructions, such as searching
.envfiles and the~/.revenuecat/directory, are narrowly scoped to locate the specific API keys required for the skill's stated functionality. - [SAFE]: Procedures for handling platform-specific credentials (Apple .p8 keys and Google Service Account JSONs) are consistent with standard developer workflows for IAP management and include security hygiene recommendations such as deleting temporary copies after use.
Audit Metadata