create-app
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official RevenueCat SDKs located on GitHub and available through standard, well-known package managers (CocoaPods, Maven/Gradle). These are verified vendor resources according to the author context.
- [COMMAND_EXECUTION]: The skill utilizes Model Context Protocol (MCP) tools such as
mcp_RC_create_app,mcp_RC_get_project, andmcp_RC_list_apps. These are used appropriately to perform intended administrative tasks within the user's RevenueCat account. - [CREDENTIALS_UNSAFE]: Mentions the handling of sensitive credentials like App Store Connect keys and Google Service Account JSON files. The instructions correctly advise users to manage these through official dashboards and provide example public API keys for documentation purposes only, which is safe practice.
Audit Metadata