rc-one-time-products

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly about handling in-app payments via the RevenueCat SDK: it instructs configuring Purchases with an API key, fetching offerings, launching purchases with PurchaseParams and Purchases.sharedInstance.awaitPurchase, and relies on RevenueCat/Google Play billing to acknowledge/consume and verify receipts (and recommends subscribing to RevenueCat webhooks like INITIAL_PURCHASE). These are payment-specific APIs/flows (directly initiating and finalizing purchases and handling receipts), not generic tooling, so it grants direct financial execution capability.