revenuecat
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs
react-native-purchasesandreact-native-purchases-uiusingnpx expo install. These are official packages provided by RevenueCat, a well-known service for mobile subscription management. - [INDIRECT_PROMPT_INJECTION]: The skill implements a webhook handler that processes incoming JSON data from RevenueCat to update user profiles in Supabase. This ingestion point is protected by a mandatory
Authorizationheader check (REVENUECAT_WEBHOOK_AUTH) to ensure that only verified events from RevenueCat are processed, mitigating the risk of unauthorized data injection.
Audit Metadata