mobile-monetization
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions include installing standard, well-known monetization libraries such as react-native-purchases, expo-in-app-purchases, and react-native-iap from official package registries.
- [INDIRECT_PROMPT_INJECTION]: The skill contains logic to fetch and display product metadata (titles and prices) from external app stores via RevenueCat, which is an inherent part of the monetization workflow. 1. Ingestion points: Product metadata is retrieved from external store APIs via Purchases.getOfferings() in SKILL.md. 2. Boundary markers: None are present in the provided UI example code. 3. Capability inventory: The skill utilizes tools for dependency installation (mobile_installDependency) and UI component generation (mobile_generateScreen). 4. Sanitization: No explicit sanitization or escaping of the remote product strings is shown in the React Native examples.
Audit Metadata