referral-programs
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured guidelines and frameworks for designing B2B SaaS referral programs based on academic research and industry benchmarks.
- [COMMAND_EXECUTION]: The included Python script
scripts/check-output.pyis a benign validation utility. It reads a local file to verify the presence of relevant keywords (e.g., 'referral', 'affiliate') and does not execute external commands or perform network operations. - [EXTERNAL_DOWNLOADS]: The skill references documentation and reference playbooks located on the vendor's (LeadMagic) official GitHub repository. These links are informational and do not involve the download or execution of remote code.
- [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface where it processes user-provided business requirements to generate a design document. However, the skill lacks high-risk capabilities such as network exfiltration or arbitrary system access, and the provided templates use clear structural markers that mitigate the risk of accidental instruction following from processed data.
Audit Metadata