purchase-flow
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and implementation guidelines for Google Play Billing, following official Android development patterns.
- [SAFE]: Promotes security best practices by instructing developers to use one-way hashes for user identifiers (
obfuscatedAccountId) instead of plain text or email to prevent PII exposure to third parties. - [SAFE]: Recommends server-side verification of purchase tokens, which is the industry-standard method to prevent fraudulent transactions and unauthorized access to content.
- [SAFE]: All external references point to the vendor's official domain (
revenuecat.com) or well-known services (play.google.com).
Audit Metadata