rc-testing
Warn
Audited by Snyk on Jun 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly about wiring and invoking in-app purchase flows using RevenueCat (creating a Test Store key, configuring Purchases.configure with RC_API_KEY, calling awaitPurchase / purchase via Purchases.sharedInstance, and structuring a BillingService that performs purchases). Those are specific payment-related APIs and transaction calls (creating test API keys, triggering purchases, and handling purchase results), i.e. explicitly designed to execute payment transactions rather than being a generic tool. Therefore it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata