revenuecat-customer-center
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Provides instructions to download and install RevenueCat SDK components from official repositories and package managers including npm, pub.dev, and Maven Central.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes local project configuration files to determine the project's platform, creating an attack surface for instructions embedded in project metadata.
- Ingestion points: Reads project files including
package.json,pubspec.yaml,build.gradle.kts,Package.swift,Podfile, and*.xcodeprojfrom the working directory. - Boundary markers: Absent; the skill relies on direct file inspection without specific delimiters for external content.
- Capability inventory: The skill provides instruction sets for code modification and SDK installation. No automated subprocess or network execution scripts are included in the skill itself.
- Sanitization: Not applicable as the skill provides instructions for the agent's behavior rather than executable code.
Audit Metadata