affiliate-check — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited affiliate-check (Agent Skill) and scored it 91/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 1 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} is the classic direct prompt-injection phrasing. Placed in a skill body that the agent reads as trusted instructions, it tries to make the agent abandon its prior rules and follow whatever comes next — a full system-prompt override.
ignore/disregard/forget … previous instructions sentence.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Query affiliate program data from list.affitor.com in real-time. Persistent daemon with in-memory cache — first call auto-starts the server, every subsequent call is instant.
Before using any command, find the skill and check if the binary exists:
# Check project-level first, then user-level
if test -x .claude/skills/affiliate-skills/tools/dist/affiliate-check; then
A=.claude/skills/affiliate-skills/tools/dist/affiliate-check
elif test -x ~/.claude/skills/affiliate-skills/tools/dist/affiliate-check; then
A=~/.claude/skills/affiliate-skills/tools/dist/affiliate-check
else
echo "NEEDS_SETUP"
fiSet A to whichever path exists and use it for all commands.
If NEEDS_SETUP:
cd <SKILL_DIR> && ./setupbun is not installed: curl -fsSL https://bun.sh/install | bashA=~/.claude/skills/affiliate-skills/tools/dist/affiliate-check
# Search programs
$A search "AI video tools"
$A search --recurring --tags ai
# Top programs
$A top
$A top --sort trending
# Program details
$A info heygen
# Compare programs side-by-side
$A compare heygen synthesia
# Server management
$A status
$A stopaffiliate-check search <query> Search by name/keyword
affiliate-check search --recurring Filter recurring commissions
affiliate-check search --tags ai,video Filter by tags
affiliate-check search --min-cookie 30 Min cookie days
affiliate-check search --sort new Sort: trending | new | top
affiliate-check search --limit 20 Result limitaffiliate-check top Top programs by stars
affiliate-check top --sort trending Trending programs
affiliate-check top --sort new Newest programsaffiliate-check info <name> Detailed program card
affiliate-check compare <name1> <name2> [name3] Side-by-side comparisonaffiliate-check status Uptime, cache, API key status
affiliate-check stop Shutdown daemon
affiliate-check help Full helpAFFITOR_API_KEY Optional. API key from list.affitor.com
Without: free tier (max 5 results per query)
With: unlimited access
Get one: list.affitor.com/settings → API Keys (free)/tmp/affiliate-check.json~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.