referrals

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructions direct the agent to read context from external files, creating a surface for indirect instructions to influence agent behavior.
  • Ingestion points: .agents/product-marketing.md, .claude/product-marketing.md, and product-marketing-context.md (referenced in SKILL.md).
  • Boundary markers: None specified; the agent is simply told to read these files before asking questions.
  • Capability inventory: The skill itself does not define subprocess execution, file writing, or network operations, though it references external tool integration guides.
  • Sanitization: No filtering or validation logic is defined for the content of the ingested files.
  • [SAFE]: The skill mentions and provides links to several well-known and trusted services for referral and affiliate management, including Stripe, HubSpot, Rewardful, and PartnerStack. These references are documented neutrally as part of the skill's primary purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 02:19 AM