Casino Affiliate by Rollhub
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill is a disclosed Rollhub casino-affiliate helper, but it encourages autonomous public gambling promotion and embeds a fixed upstream referral code users should review carefully.
Only use this skill if you intentionally want an agent to help with casino affiliate marketing. Verify Rollhub and its fairness/earnings claims independently, understand the fixed master referral code before registering, and do not let an agent post or message communities without your explicit review and clear affiliate disclosure.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could draft or publish gambling affiliate promotions that affect the user's reputation, platform compliance, or legal obligations.
The skill directs agent-driven public promotion and outreach. If the agent has social posting tools, the artifacts do not require per-post user approval or tightly scope where posts may be made.
Autonomous affiliate marketing skill ... social media marketing, Twitter promotion, Reddit marketing, Discord outreach
Require explicit user review before any post, DM, or community outreach; limit use to user-approved accounts and platforms; and keep an audit trail of generated promotional content.
Using this guidance could make the user's agent appear to do stealth marketing or violate community rules.
The Reddit guidance suggests reframing affiliate promotion in communities that may ban direct promotion, which can mislead communities or bypass platform intent even though other text says to disclose.
Many ban direct promotion — frame as experience/discussion.
Do not use disguised promotion. Only post where advertising and affiliate links are clearly allowed, and make the affiliate relationship explicit.
The user may create an affiliate account tied to someone else's referral relationship without fully understanding the financial tradeoff.
Registration is hardcoded to use a fixed master referral code, but the artifacts do not clearly explain who controls that code or how it affects commissions and attribution.
Registering as affiliate with master ref code... -d '{"ref": "ref_27fcab61"}'The skill should clearly disclose ownership and effects of the master referral code and allow the user to omit or replace it.
Anyone with the API key may be able to access affiliate stats or related account functions depending on Rollhub's API permissions.
The script sends the affiliate API key to Rollhub's stats endpoint. This is expected for the stated purpose and no other destination is shown, but it is still credential handling.
-H "Authorization: Bearer $ROLLHUB_AFFILIATE_KEY"
Set the API key only if you trust the service, avoid sharing logs or shell history containing it, and rotate or unset it if no longer needed.