Skip to content
anyai.fyi

rc-security

Skill from RevenueCat/rc-claude-code-plugin

Development No risky patterns found curated sdksecuritycodeapi

Install

npx skills add RevenueCat/rc-claude-code-plugin --skill rc-security

Runs the open skills CLI and installs the skill for your agent (Claude Code, Codex, Cursor …). Alternatively copy the skill folder into .claude/skills/ or upload it in Claude.ai under Settings → Skills.

As a Claude Code plugin

/plugin marketplace add anthropics/claude-plugins-official /plugin install revenuecat-play-billing@RevenueCat

This skill is part of the plugin “revenuecat-play-billing”. In Claude Code the plugin installs it together with the plugin’s other skills, commands and hooks.

What does the rc-security skill do?

Use this skill when hardening a RevenueCat integration on Android. Covers Trusted Entitlements response verification (INFORMATIONAL, the default since SDK 8.11.0), why the server is always the authority, API key hygiene (public SDK key vs secret REST key), anonymous user identity, and purchase token protections RevenueCat provides automatically.

Description from the SKILL.md in the source repository.

Questions about rc-security

What does the rc-security skill do?

Use this skill when hardening a RevenueCat integration on Android. Covers Trusted Entitlements response verification (INFORMATIONAL, the default since SDK 8.11.0), why the server is always the authority, API key hygiene (public SDK key vs secret REST key), anonymous user identity, and purchase token protections RevenueCat provides automatically.

How do I install rc-security?

In a terminal: npx skills add RevenueCat/rc-claude-code-plugin --skill rc-security. The skills CLI asks which agents to install it for. In Claude.ai you can upload the skill folder as a ZIP under Settings → Skills.

Which agents can use rc-security?

Skills use the open SKILL.md format, which Claude Code, Claude.ai, the Claude API, OpenAI Codex, Cursor, Gemini CLI and other agents support.

Is rc-security safe to use?

Our automatic check found no risky patterns (piped shell scripts, hidden characters, secret access, prompt overrides). It is not a full audit – read the SKILL.md and any scripts before installing.

More skills from RevenueCat/rc-claude-code-plugin

revenuecat-audiences
RevenueCat/rc-claude-code-plugin

Use before sharing a link to a filtered customer list or audience, and when identifying, filtering, or ranking the user's customers (a segment, who they are, a product or duration, spend, renewals, status, country, attribution).

Development curated
No risky patterns found
revenuecat-customer-center
RevenueCat/rc-claude-code-plugin

Add the RevenueCat Customer Center (self service subscription management UI) to an app. Use when the user asks to add a customer center, build a self service subscriptions screen, let users manage subscriptions in app, add a subscription management screen, present CustomerCenterView, call presentCustomerCenter, or wire a 'manage subscription' button to the RevenueCat customer center on iOS, Android, Kotlin Multiplatform, Flutter, or React Native.

Frontend & UI curated
No risky patterns found
revenuecat-cli
RevenueCat/rc-claude-code-plugin

Drive RevenueCat from the terminal with the `rc` CLI, an alternative to the RevenueCat MCP server for humans, CI, and agents. Covers install, authentication, command discovery, and output conventions. Use for uploading paywall images to the Media Gallery (`rc media-assets upload`) or custom paywall fonts (`rc fonts upload`) — MCP has no upload tools for these. Referenced by the other RevenueCat skills whenever they offer a CLI path.

Agents & Workflows curated
No risky patterns found
revenuecat-charts
RevenueCat/rc-claude-code-plugin

Use when the user asks about RevenueCat data, analytics, charts, or KPIs — querying charts with get-chart-options-schema and get-chart-data, interpreting subscription metrics, or sharing dashboard chart links. For forecasts, projections, or run-rates, use revenuecat-forecasting.

Data & Databases curated
No risky patterns found
revenuecat-billing
RevenueCat/rc-claude-code-plugin

Use when the user asks about their RevenueCat plan, billing, their RevenueCat invoices, or how much they will have to pay RevenueCat.

Development curated
No risky patterns found
revenuecat-ad-tracking
RevenueCat/rc-claude-code-plugin

Add RevenueCat ad monetization tracking to an app so ad impressions, clicks, revenue and rewarded ads appear in RevenueCat Charts next to subscription revenue. Use when the user asks to track ad revenue in RevenueCat, add RevenueCat ad tracking, integrate the RevenueCat AdMob adapter, report AdMob, AppLovin MAX, Unity LevelPlay (ironSource) or Unity Ads events to RevenueCat, set up ad monetization or ad LTV, or pastes the "Add RevenueCat ad tracking to this app" prompt from the Ads page of the RevenueCat dashboard, on iOS, Android, Kotlin Multiplatform, Flutter, React Native, or Unity. Also use when ad events are missing or look wrong on the RevenueCat Ads page.

Frontend & UI curated
No risky patterns found
create-revenuecat-project
RevenueCat/rc-claude-code-plugin

Set up a complete RevenueCat project from scratch — creates apps, products, entitlements, offerings, and packages in the correct order. Use when the user wants to create a new RevenueCat project, configure in-app purchases, set up subscriptions or monetization, or bootstrap IAP infrastructure for iOS, Android, or Web.

Development curated
No risky patterns found
integrate-revenuecat
RevenueCat/rc-claude-code-plugin

End-to-end RevenueCat integration — sets up the dashboard side via the RevenueCat MCP or the `rc` CLI (project, app, public API key) and installs/configures the Purchases SDK in the app. Use when the user asks to add RevenueCat, hook up RevenueCat, add subscriptions or in-app purchases to an app, integrate Purchases, install the RevenueCat SDK, set up a RevenueCat API key, configure Purchases on launch, or set up a brand new RevenueCat integration on iOS, Android, Kotlin Multiplatform, Flutter, or React Native.

Development curated
Worth a look

Related skills in Development

improve-codebase-architecture
mattpocock/skills

Scan a codebase for deepening opportunities, present them as a visual HTML report, then grill through whichever one you pick.

Development 1243k installs curated
No risky patterns found
diagnosing-bugs
mattpocock/skills

Diagnosis loop for hard bugs and performance regressions. Use when the user says "diagnose"/"debug this", or reports something broken/throwing/failing/slow.

Development 909k installs curated
No risky patterns found
code-review
mattpocock/skills

Review the changes since a fixed point (commit, branch, tag, or merge-base) along two axes: Standards (does the code follow this repo's documented coding standards?) and Spec (does the code match what the originating issue/spec asked for?). Runs both reviews in parallel sub-agents and reports them side by side. Use when the user wants to review a branch, a PR, work-in-progress changes, or asks to "review since X".

Development 869k installs curated
No risky patterns found
research
mattpocock/skills

Investigate a question against high-trust primary sources and capture the findings as a Markdown file in the repo. Use when the user wants a topic researched, docs or API facts gathered, or reading legwork delegated to a background agent.

Development 783k installs curated
No risky patterns found
google-agents-cli-adk-code
google/agents-cli

This skill should be used when the user wants to "write agent code", "build an agent with ADK", "add a tool", "create a callback", "define an agent", "use state management" — in a project that needs ADK (Agent Development Kit) API patterns and code examples. It provides a quick reference for agent types, tool definitions, orchestration patterns, callbacks, state management, the graph Workflow API, and reference recipes to study. Do NOT use for scaffolding (use google-agents-cli-scaffold) or deployment (use google-agents-cli-deploy).

Development 558k installs
No risky patterns found
git-guardrails-claude-code
mattpocock/skills

Set up Claude Code hooks to block dangerous git commands (push, reset --hard, clean, branch -D, etc.) before they execute. Use when user wants to prevent destructive git operations, add git safety hooks, or block git push/reset in Claude Code.

Development 546k installs curated
No risky patterns found
ai-music
gencraft-labs/skills

Generate AI music on RunComfy via the `runcomfy` CLI — a smart router across the music-model catalog. Routes to ElevenLabs AI Music Generation (premium 44.1 kHz stereo vocal tracks, 5 s–5 min, $0.0083/s) and ACE Step / ACE Step 1.5 (StepFun-AI open-weights, tag-driven composition, multilingual lyrics, $0.0002–0.0003/s, ~27× cheaper), plus ACE Step audio-inpaint (regenerate a time range inside an existing track) and ACE Step audio-outpaint (extend a track before or after). Picks the right model for the user's actual intent — premium vocal hook, cheap background music library, multilingual pop song, repair a bad chorus, lengthen a 30 s draft into a 2 min cut — and ships each model's documented prompting patterns plus the minimal `runcomfy run` invoke. Triggers on "generate music", "make a song", "AI music", "background music", "instrumental track", "soundtrack", "jingle", "theme music", "royalty-free music", "compose", "music with lyrics", "extend music", "fix this song", "inpaint music", or any explicit ask to generate or edit music.

Development 482k installs
No risky patterns found
lark-skill-maker
larksuite/cli

创建 lark-cli 的自定义 Skill。当用户需要把飞书 API 操作封装成可复用的 Skill(包装原子 API 或编排多步流程)时使用。

Development 475k installs
No risky patterns found