skills/voys-apps/app-publishing/rc-api/Socket

rc-api

Warn

Audited by Socket on Aug 8, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s capabilities and RevenueCat credential scope mostly match its stated purpose, and data flows point to official RevenueCat endpoints. The main risk is install trust: it relies on an unpinned remote skill installation through the Skills CLI, with third-party publisher ownership not independently verified and transitive trust in added skill content.

Confidence: 83%Severity: 58%

Audit Metadata

Analyzed At

Aug 8, 2026, 09:49 AM

Package URL

pkg:socket/skills-sh/voys-apps%2Fapp-publishing%2Frc-api%2F@129d895e156323d0877b75733170e55452eec5a3ecbb7cc347e49a3d8c68cefd