configuring-the-sdk
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
rg(ripgrep) command-line tool to perform local discovery of existing configuration and billing code within the user's project. This is a standard and expected operation for a developer-oriented skill. - [EXTERNAL_DOWNLOADS]: The skill provides instructions to include the
com.revenuecat.purchases:purchasesdependency in a Gradle build file. This is the official SDK maintained by the authoring vendor (RevenueCat). - [CREDENTIALS_UNSAFE]: The skill explicitly promotes security best practices by instructing users to keep API keys out of source code, suggesting the use of
BuildConfigor secret managers for injection.
Audit Metadata