Software Development

Rc Security

Use this skill when hardening a RevenueCat integration on Android. Covers Trusted Entitlements response verification (INFORMATIONAL vs ENFORCED), why the server is always the authority, API key hygiene (public SDK key vs secret REST key), anonymous user identity, and purchase token protections RevenueCat provides automatically.

Publisher / source
RevenueCat/ai-toolkit (found on skills.sh)
Upstream record
RevenueCat/ai-toolkit
Version
Version 3
Published
Publication review
Approved for publication · recorded passed scan 2026-11-03
Content fingerprint
cb70570da05ed22c4f14478ef6a8ef409568d86cf6e8ff3be59a89d177655cfb