SkinCore should authenticate with Steam OpenID, store only the returned SteamID and allowed profile data, and never request or store Steam passwords, cookies, shared secrets, or user API keys.
Trades are modeled as deterministic purchases or swaps. No cases, random outcomes, wagering, jackpot pools, or casino mechanics belong in the product.
Every production screen must avoid implying affiliation with Valve or Steam unless there is written approval. Steam data usage needs a privacy policy and server-side API key handling.
SkinCore