rc-webhooks

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides technical documentation and code templates for implementing RevenueCat webhooks. It follows industry best practices by emphasizing the importance of signature verification via the 'X-RevenueCat-Signature' header to ensure payload authenticity.
  • [SAFE]: It correctly instructs on the use of 'event.id' as an idempotency key to prevent replay attacks or duplicate processing of events, which is a standard security requirement for webhook consumers.
  • [SAFE]: The provided Kotlin code snippets are for demonstration purposes and do not involve suspicious command execution, remote script downloads, or data exfiltration.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 09:53 PM
Security Audit — agent-trust-hub — rc-webhooks