Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward affiliate-marketing guidance skill with no executable code or hidden persistence.
Install this if you want affiliate-program strategy help. Be aware it may read local project-context files when present to tailor advice, and review any business terms or platform choices before acting on them.
The activation description is overly broad and includes many generic marketing phrases, which can cause the skill to trigger in conversations that are not clearly about affiliate marketing. This creates scope creep and increases the chance the agent applies affiliate-specific guidance in the wrong context, potentially leading to irrelevant actions or disclosure of inappropriate recommendations.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
| Risk | Prevention |
|------|------------|
| **Affiliate fraud** | Fake clicks, self-referrals, fake conversions. Use platform fraud tools; vet affiliates; avoid auto-approve. |
| **Brand bidding** | Affiliates bid on your brand terms in Google Ads; you pay commission for traffic you already own. Prohibit in terms; monitor paid search; use brand monitoring tools. See **paid-ads-strategy** for paid ads context. |
| **Program terms** | Cookie length, performance bonus, sub-affiliate rules, payment threshold—set clearly in terms before launch. |
No suspicious patterns detected.