ionic-skills

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly integrates RevenueCat and exposes purchase-related APIs (initializePurchases, getOfferings, purchasePackage / Purchases.purchasePackage, restorePurchases, isPremiumUser). These are concrete payment/purchase operations (processing subscriptions/purchases) and include configuring API keys and calling Purchases.purchasePackage to execute transactions. That constitutes direct financial execution capability (in-app payment processing). Note: AdMob usage appears but is for ad display only (not ad-budget management) — the decisive factor is the RevenueCat purchase functions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 01:00 AM