integrate-revenuecat-rn-android
Fail
Audited by Snyk on Aug 5, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The code snippet explicitly embeds an API key literal (Purchases.configure({ apiKey: 'goog_YOUR_RC_API_KEY' })), which encourages including secret values verbatim in generated code or output.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly for integrating RevenueCat (a payments/subscriptions SDK that wraps Google Play Billing). It includes direct payment-related API calls (e.g., Purchases.purchasePackage(...) to complete purchases, Purchases.restorePurchases(), getOfferings() and product price display). These are specific financial execution functions (triggering payments/subscription purchases and restores), not generic tooling.
Issues (2)
W007
HIGHInsecure credential handling detected in skill instructions.
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata