integrate-revenuecat-rn

Pass

Audited by Gen Agent Trust Hub on Aug 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and code snippets for integrating RevenueCat, a well-known subscription management service. No malicious patterns were detected.
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of official packages: react-native-purchases and react-native-purchases-ui. These are legitimate SDKs provided by RevenueCat for React Native development.
  • [CREDENTIALS_UNSAFE]: The skill correctly identifies the risk of hardcoding credentials. It uses a placeholder <platform-public-sdk-key> in the configuration example and explicitly warns the user not to place provider credentials in the source control, logs, or prompts.
  • [COMMAND_EXECUTION]: The skill uses npx expo install to add dependencies, which is the standard and expected method for Expo projects.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 5, 2026, 11:17 PM
Security Audit — agent-trust-hub — integrate-revenuecat-rn