ionic-skills
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly integrates RevenueCat and exposes purchase-related APIs (initializePurchases, getOfferings, purchasePackage / Purchases.purchasePackage, restorePurchases, isPremiumUser). These are concrete payment/purchase operations (processing subscriptions/purchases) and include configuring API keys and calling Purchases.purchasePackage to execute transactions. That constitutes direct financial execution capability (in-app payment processing). Note: AdMob usage appears but is for ad display only (not ad-budget management) — the decisive factor is the RevenueCat purchase functions.
Audit Metadata