referrals
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions direct the agent to read context from external files, creating a surface for indirect instructions to influence agent behavior.
- Ingestion points:
.agents/product-marketing.md,.claude/product-marketing.md, andproduct-marketing-context.md(referenced in SKILL.md). - Boundary markers: None specified; the agent is simply told to read these files before asking questions.
- Capability inventory: The skill itself does not define subprocess execution, file writing, or network operations, though it references external tool integration guides.
- Sanitization: No filtering or validation logic is defined for the content of the ingested files.
- [SAFE]: The skill mentions and provides links to several well-known and trusted services for referral and affiliate management, including Stripe, HubSpot, Rewardful, and PartnerStack. These references are documented neutrally as part of the skill's primary purpose.
Audit Metadata