rc-webhooks
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides technical documentation and code templates for implementing RevenueCat webhooks. It follows industry best practices by emphasizing the importance of signature verification via the 'X-RevenueCat-Signature' header to ensure payload authenticity.
- [SAFE]: It correctly instructs on the use of 'event.id' as an idempotency key to prevent replay attacks or duplicate processing of events, which is a standard security requirement for webhook consumers.
- [SAFE]: The provided Kotlin code snippets are for demonstration purposes and do not involve suspicious command execution, remote script downloads, or data exfiltration.
Audit Metadata