The Agent Skills Directory

[SAFE]: The skill's instructions for setting up affiliate programs on platforms like Shopify and WooCommerce follow industry standard practices. No malicious code, data exfiltration, or unauthorized persistence mechanisms were detected.
[INDIRECT_PROMPT_INJECTION]: The skill provides logic for processing external inputs, creating a potential injection surface. 1. Ingestion points: The trackAffiliateClick and attributeOrderToAffiliate functions in SKILL.md process req.query.aff, req.query.redirect, and order.customerEmail. 2. Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the code snippets. 3. Capability inventory: The skill performs database writes, sets browser cookies, executes redirects, and initiates Stripe API transfers. 4. Sanitization: While the skill's evaluation criteria in the evals/ directory require secure implementations, the code examples in SKILL.md rely on simple type casting without robust input validation.

affiliate-program