rc-paywall-code

Warn

Audited by Socket on Aug 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core behavior is mostly coherent with a RevenueCat paywall automation skill and data flows go to official RevenueCat endpoints, which argues against malware. However, the install path uses transitive `npx skills add` trust with limited provenance depth, and one legacy repo reference was not verifiable, so the overall skill should be treated as medium risk rather than benign.

Confidence: 88%Severity: 52%
Audit Metadata
Analyzed At
Aug 8, 2026, 09:46 AM
Package URL
pkg:socket/skills-sh/voys-apps%2Fapp-publishing%2Frc-paywall-code%2F@93d1fb9224dc5cd70e279d24a0617bcdd3e8cb6a23f7cc6e03c33e8be7b5ddfc