rc-security
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational resource for developers, providing secure implementation patterns and verification workflows for subscription management.
- [EXTERNAL_DOWNLOADS]: The skill references official documentation from RevenueCat's verified domain. These are informational references to a well-known service and do not trigger automated downloads or code execution.
- [CREDENTIALS_UNSAFE]: All code examples use safe placeholders for configuration keys (e.g., 'goog_PUBLIC_android_sdk_key'). The skill explicitly warns against the dangerous practice of hardcoding secret keys in client-side code and provides remediation steps to audit for such leaks.
Audit Metadata