pp-revenuecat

Warn

Audited by Socket on Jul 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: largely coherent RevenueCat admin/analytics skill with same-ecosystem install sources, but it depends on mutable external binaries and exposes broad outbound delivery plus consequential write operations. The main concern is operational/data-leak risk and transitive trust, not confirmed malicious intent.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Jul 3, 2026, 02:09 PM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-revenuecat%2F@f44b4df336533516bc2bc7f45e291f3bc66087bf9edc29fb95f01972e0d4ad66
Security Audit — socket — pp-revenuecat