rc-backend

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is primarily educational, providing architectural patterns and code snippets for using RevenueCat's backend services. It does not contain any executable malicious code.
  • [EXTERNAL_DOWNLOADS]: The skill references official RevenueCat domains (api.revenuecat.com and www.revenuecat.com) for API interactions and documentation. These are legitimate vendor resources and do not represent a security risk.
  • [CREDENTIALS_UNSAFE]: The skill correctly demonstrates secure credential management by recommending the use of environment variables (e.g., System.getenv("RC_SECRET_KEY")) and providing non-sensitive placeholders (sk_...) for API keys in documentation. It explicitly warns against embedding secret keys in client-side application bundles.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 09:53 PM
Security Audit — agent-trust-hub — rc-backend