rc-paywall-code
Warn
Audited by Socket on Aug 8, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core behavior is mostly coherent with a RevenueCat paywall automation skill and data flows go to official RevenueCat endpoints, which argues against malware. However, the install path uses transitive `npx skills add` trust with limited provenance depth, and one legacy repo reference was not verifiable, so the overall skill should be treated as medium risk rather than benign.
Confidence: 88%Severity: 52%
Audit Metadata