rc-backend
Use this skill when your backend needs to read or update RevenueCat state on Android. Covers the RevenueCat REST API (v1 subscribers endpoint, grant/revoke entitlements, attributes), secret vs public SDK API key usage, and why you do not build a receipt verification backend with RevenueCat.
82%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Medium
Suggest reviewing before use
W009: Direct money access capability detected (payment gateways, crypto, banking).
What this means
The skill is specifically designed for direct financial operations, giving the agent the ability to move money or execute financial transactions — such as payment processing, cryptocurrency operations, banking integrations, or market order execution.
Why it was flagged
The skill documents backend integration with RevenueCat, specifically managing subscription state, reading subscriber info, and granting/revoking promotional entitlements via the RevenueCat REST API. These functions interact with subscription state management, but do not execute direct financial transfers, charges, purchases, or trades. The promotional entitlement grants and revokes modify user access levels rather than executing direct financial instructions. Therefore, this represents an indirect financial/subscription-state operation scope, leading to a medium rating.
- Repository
RevenueCat/ai-toolkit
- Revision
2aeae8c
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.