Skills
skills/revenuecat/rc-claude-code-plugin/integrate-revenuecat/Gen Agent Trust Hub

integrate-revenuecat

Pass

Audited by Gen Agent Trust Hub on Jul 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references official SDK releases from RevenueCat's GitHub repositories (e.g., purchases-android, purchases-ios, purchases-flutter). These are trusted vendor resources.
  • [COMMAND_EXECUTION]: Provides standard terminal commands for package managers (npm, flutter, cocoapods) to install official RevenueCat libraries. These operations are expected within the scope of SDK integration.
  • [DATA_EXFILTRATION]: The skill instructs the agent to read local configuration files like Info.plist and AndroidManifest.xml to retrieve the app's bundle ID or package name. This information is used solely for configuring the app within the RevenueCat dashboard via the official MCP server.
  • [CREDENTIALS_UNSAFE]: Explicitly warns users against including secret API keys in client-side code and recommends best practices for secret management, such as using .env or local.properties files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 18, 2026, 04:32 PM
Security Audit — agent-trust-hub — integrate-revenuecat