rc-backend
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily educational, providing architectural patterns and code snippets for using RevenueCat's backend services. It does not contain any executable malicious code.
- [EXTERNAL_DOWNLOADS]: The skill references official RevenueCat domains (api.revenuecat.com and www.revenuecat.com) for API interactions and documentation. These are legitimate vendor resources and do not represent a security risk.
- [CREDENTIALS_UNSAFE]: The skill correctly demonstrates secure credential management by recommending the use of environment variables (e.g., System.getenv("RC_SECRET_KEY")) and providing non-sensitive placeholders (sk_...) for API keys in documentation. It explicitly warns against embedding secret keys in client-side application bundles.
Audit Metadata