opencode-skills-collection 4.0.15 → 4.0.16

package/bundled-skills/performance-optimization/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: performance-optimization
 description: Optimizes application performance. Use when performance requirements exist, when you suspect performance regressions, or when Core Web Vitals or load times need improvement. Use when profiling reveals bottlenecks that need fixing.
-risk: unknown
+risk: critical
 source: https://github.com/addyosmani/agent-skills/tree/main/skills/performance-optimization
 source_repo: addyosmani/agent-skills
 source_type: community

package/bundled-skills/performance-profiling/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: performance-profiling
 description: "Performance profiling principles. Measurement, analysis, and optimization techniques."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/performance-testing-review-ai-review/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: performance-testing-review-ai-review
 description: "You are an expert AI-powered code review specialist combining automated static analysis, intelligent pattern recognition, and modern DevOps practices. Leverage AI tools (GitHub Copilot, Qodo, GPT-5, C"
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/performance-testing-review-multi-agent-review/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: performance-testing-review-multi-agent-review
 description: "Use when working with performance testing review multi agent review"
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/php-pro/SKILL.md

@@ -7,7 +7,7 @@ description: 'Write idiomatic PHP code with generators, iterators, SPL data
   applications.
 
   '
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/plaid-fintech/SKILL.md

@@ -3,7 +3,7 @@ name: plaid-fintech
 description: Expert patterns for Plaid API integration including Link token
   flows, transactions sync, identity verification, Auth for ACH, balance checks,
   webhook handling, and fintech compliance best practices.
-risk: unknown
+risk: critical
 source: vibeship-spawner-skills (Apache 2.0)
 date_added: 2026-02-27
 ---

package/bundled-skills/plan-writing/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: plan-writing
 description: "Structured task planning with clear breakdowns, dependencies, and verification criteria. Use when implementing features, refactoring, or any multi-step work."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/planning-and-task-breakdown/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: planning-and-task-breakdown
 description: Breaks work into ordered tasks. Use when you have a spec or clear requirements and need to break work into implementable tasks. Use when a task feels too large to start, when you need to estimate scope, or when parallel work is possible.
-risk: unknown
+risk: none
 source: https://github.com/addyosmani/agent-skills/tree/main/skills/planning-and-task-breakdown
 source_repo: addyosmani/agent-skills
 source_type: community

package/bundled-skills/planning-with-files/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: planning-with-files
 description: "Work like Manus: Use persistent markdown files as your \"working memory on disk.\""
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/playwright-skill/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: playwright-skill
 description: "IMPORTANT - Path Resolution: This skill can be installed in different locations (plugin system, manual installation, global, or project-specific). Before executing any commands, determine the skill directory based on where you loaded this SKILL.md file, and use that path in all commands below."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 plugin:

package/bundled-skills/plotly/SKILL.md

@@ -4,7 +4,7 @@ description: Interactive visualization library. Use when you need hover info, zo
 license: MIT license
 metadata:
     skill-author: K-Dense Inc.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/podcast-generation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: podcast-generation
 description: "Generate real audio narratives from text content using Azure OpenAI's Realtime API."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/polars/SKILL.md

@@ -4,7 +4,7 @@ description: Fast in-memory DataFrame library for datasets that fit in RAM. Use
 license: https://github.com/pola-rs/polars/blob/main/LICENSE
 metadata:
     skill-author: K-Dense Inc.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/polis-protocol-a-self-optimizing-city-of-agents/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: polis-protocol-a-self-optimizing-city-of-agents
 description: "Polis Protocol: A Self-Optimizing City of Agents"
-risk: unknown
+risk: critical
 source: https://github.com/yehudalevy-collab/polis-protocol/tree/main/
 source_repo: yehudalevy-collab/polis-protocol
 source_type: community

package/bundled-skills/popup-cro/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: popup-cro
 description: "Create and optimize popups, modals, overlays, slide-ins, and banners to increase conversions without harming user experience or brand trust."
-risk: unknown
+risk: none
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/postgresql/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: postgresql
 description: "Design a PostgreSQL-specific schema. Covers best-practices, data types, indexing, constraints, performance patterns, and advanced features"
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/postgresql-cli/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: postgresql-cli
 description: PostgreSQL interactive terminal (psql) reference and usage guide. Use this skill whenever the user mentions psql, PostgreSQL command-line client, backslash commands, meta-commands, \d commands, database inspection, SQL scripting in PostgreSQL, importing/exporting data with psql, \copy,...
-risk: unknown
+risk: critical
 source: https://github.com/chaunsin/agent-skills/tree/master/skills/postgresql-cli
 source_repo: chaunsin/agent-skills
 source_type: community

package/bundled-skills/postman-collection-generator/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: postman-collection-generator
 description: Generate complete, import-ready Postman Collection v2.1 JSON files from natural language API descriptions or cURL commands. Use this skill whenever the user describes an API in plain English ("I have a REST API with these endpoints..."), pastes cURL commands, or asks to "create a...
-risk: unknown
+risk: critical
 source: https://github.com/LambdaTest/agent-skills/tree/main/api-skill/postman/postman-collection-generator
 source_repo: LambdaTest/agent-skills
 source_type: community

package/bundled-skills/postman-newman-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: postman-newman-automation
 description: Generate Newman CLI commands, configuration files, Jenkins pipeline scripts, and shell automation for running Postman collections in CI/CD or local environments. Use this skill whenever the user wants to run Postman collections from the command line, automate API tests, integrate...
-risk: unknown
+risk: critical
 source: https://github.com/LambdaTest/agent-skills/tree/main/api-skill/postman/postman-to-newman
 source_repo: LambdaTest/agent-skills
 source_type: community

package/bundled-skills/postman-openapi-converter/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: postman-openapi-converter
 description: Convert OpenAPI 3.x or Swagger 2.0 specs (YAML or JSON) into complete, import-ready Postman Collection v2.1 JSON files. Use this skill whenever the user provides or references an OpenAPI spec, Swagger file, openapi.yaml, swagger.json, or uses phrases like "convert my OpenAPI spec",...
-risk: unknown
+risk: critical
 source: https://github.com/LambdaTest/agent-skills/tree/main/api-skill/postman/postman-openapi-converter
 source_repo: LambdaTest/agent-skills
 source_type: community

package/bundled-skills/postmortem-writing/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: postmortem-writing
 description: "Comprehensive guide to writing effective, blameless postmortems that drive organizational learning and prevent incident recurrence."
-risk: unknown
+risk: none
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/power-user-cultivation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: power-user-cultivation
 description: When the user wants to identify and nurture developer advocates, build champion programs, or turn active users into contributors and evangelists. Trigger phrases include "power users," "developer advocates," "ambassador program," "champion program," "community contributors," "referral...
-risk: unknown
+risk: safe
 source: https://github.com/jonathimer/devmarketing-skills/tree/main/skills/power-user-cultivation
 source_repo: jonathimer/devmarketing-skills
 source_type: community

package/bundled-skills/powershell-windows/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: powershell-windows
 description: "PowerShell Windows patterns. Critical pitfalls, operator syntax, error handling."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/pptx-official/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: pptx-official
 description: "A user may ask you to create, edit, or analyze the contents of a .pptx file. A .pptx file is essentially a ZIP archive containing XML files and other resources that you can read or edit. You have different tools and workflows available for different tasks."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/pr-writer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: pr-writer
 description: "Create pull requests following Sentry's engineering practices."
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/pricing/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: pricing
 description: When the user wants help with pricing decisions, packaging, or monetization strategy. Also use when the user mentions 'pricing,' 'pricing tiers,' 'freemium,' 'free trial,' 'packaging,' 'price increase,' 'value metric,' 'Van Westendorp,' 'willingness to pay,' 'monetization,' 'how much...
-risk: unknown
+risk: safe
 source: https://github.com/coreyhaines31/marketingskills/tree/main/skills/pricing
 source_repo: coreyhaines31/marketingskills
 source_type: community

package/bundled-skills/pricing-strategy/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: pricing-strategy
 description: "Design pricing, packaging, and monetization strategies based on value, customer willingness to pay, and growth objectives."
-risk: unknown
+risk: none
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/prisma-expert/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: prisma-expert
 description: "You are an expert in Prisma ORM with deep knowledge of schema design, migrations, query optimization, relations modeling, and database operations across PostgreSQL, MySQL, and SQLite."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/privacy-mask/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: privacy-mask
 description: Mask, redact, anonymize and censor sensitive information (PII) in screenshots and images — phone numbers, emails, IDs, API keys, crypto wallets, credit cards, passwords, and more. Uses OCR (Tesseract + RapidOCR) with 47 regex rules and optional NER (GLiNER) to detect private data and...
-risk: unknown
+risk: critical
 source: https://github.com/fullstackcrew-alpha/privacy-mask/tree/main/
 source_repo: fullstackcrew-alpha/privacy-mask
 source_type: community

package/bundled-skills/product-manager-toolkit/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: product-manager-toolkit
 description: "Essential tools and frameworks for modern product management, from discovery to delivery."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/product-marketing/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: product-marketing
 description: When the user wants to create or update their product marketing context document. Also use when the user mentions 'product context,' 'marketing context,' 'set up context,' 'positioning,' 'who is my target audience,' 'describe my product,' 'ICP,' 'ideal customer profile,' or wants to...
-risk: unknown
+risk: critical
 source: https://github.com/coreyhaines31/marketingskills/tree/main/skills/product-marketing
 source_repo: coreyhaines31/marketingskills
 source_type: community

package/bundled-skills/product-marketing-context/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: product-marketing-context
 description: "Create or update a reusable product marketing context document with positioning, audience, ICP, use cases, and messaging. Use at the start of a project to avoid repeating core marketing context across tasks."
-risk: unknown
+risk: critical
 source: "https://github.com/coreyhaines31/marketingskills"
 date_added: "2026-03-21"
 metadata:

package/bundled-skills/production-code-audit/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: production-code-audit
 description: "Autonomously deep-scan entire codebase line-by-line, understand architecture and patterns, then systematically transform it to production-grade, corporate-level professional quality with optimizations"
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/programmatic-seo/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: programmatic-seo
 description: Design and evaluate programmatic SEO strategies for creating SEO-driven pages at scale using templates and structured data.
-risk: unknown
+risk: none
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/project-development/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: project-development
 description: "This skill covers the principles for identifying tasks suited to LLM processing, designing effective project architectures, and iterating rapidly using agent-assisted development."
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/prometheus-configuration/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: prometheus-configuration
 description: "Complete guide to Prometheus setup, metric collection, scrape configuration, and recording rules."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/prompt-engineering/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: prompt-engineering
 description: "Expert guide on prompt engineering patterns, best practices, and optimization techniques. Use when user wants to improve prompts, learn prompting strategies, or debug agent behavior."
-risk: unknown
+risk: none
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/prompt-engineering-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: prompt-engineering-patterns
 description: "Master advanced prompt engineering techniques to maximize LLM performance, reliability, and controllability."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/prompt-library/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: prompt-library
 description: "A comprehensive collection of battle-tested prompts inspired by [awesome-chatgpt-prompts](https://github.com/f/awesome-chatgpt-prompts) and community best practices."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/public-relations/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: public-relations
 description: When the user wants help with public relations, earned media, press coverage, journalist outreach, or media strategy (not pull requests). Also use when the user mentions 'PR,' 'public relations,' 'press,' 'press release,' 'press coverage,' 'media outreach,' 'pitch a journalist,' 'get...
-risk: unknown
+risk: critical
 source: https://github.com/coreyhaines31/marketingskills/tree/main/skills/public-relations
 source_repo: coreyhaines31/marketingskills
 source_type: community

package/bundled-skills/pubmed-database/SKILL.md

@@ -4,7 +4,7 @@ description: Direct REST API access to PubMed. Advanced Boolean/MeSH queries, E-
 license: Unknown
 metadata:
     skill-author: K-Dense Inc.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/puppeteer-skill/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: puppeteer-skill
 description: 'Generates Puppeteer scripts for browser automation, scraping, and PDF generation. Triggers on: "Puppeteer", "headless Chrome", "page.goto", "scrape", "PDF generation".'
-risk: unknown
+risk: critical
 source: https://github.com/LambdaTest/agent-skills/tree/main/puppeteer-skill
 source_repo: LambdaTest/agent-skills
 source_type: community

package/bundled-skills/pydantic-models-py/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: pydantic-models-py
 description: "Create Pydantic models following the multi-model pattern for clean API contracts."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/pytest-skill/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: pytest-skill
 description: 'Generates production-grade pytest tests in Python with fixtures, parametrize, markers, mocking, and conftest patterns. Use when user mentions "pytest", "conftest", "@pytest.fixture", "@pytest.mark", "Python test". Triggers on: "pytest", "conftest", "Python test", "parametrize", "Python...'
-risk: unknown
+risk: critical
 source: https://github.com/LambdaTest/agent-skills/tree/main/pytest-skill
 source_repo: LambdaTest/agent-skills
 source_type: community

package/bundled-skills/python-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: python-patterns
 description: "Python development principles and decision-making. Framework selection, async patterns, type hints, project structure. Teaches thinking, not copying."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/python-pro/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: python-pro
 description: Master Python 3.12+ with modern features, async programming, performance optimization, and production-ready practices. Expert in the latest Python ecosystem including uv, ruff, pydantic, and FastAPI.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/qiskit/SKILL.md

@@ -4,7 +4,7 @@ description: "Qiskit is the world's most popular open-source quantum computing f
 license: Apache-2.0 license
 metadata:
     skill-author: K-Dense Inc.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/rag-engineer/SKILL.md

@@ -3,7 +3,7 @@ name: rag-engineer
 description: Expert in building Retrieval-Augmented Generation systems. Masters
   embedding models, vector databases, chunking strategies, and retrieval
   optimization for LLM applications.
-risk: unknown
+risk: critical
 source: vibeship-spawner-skills (Apache 2.0)
 date_added: 2026-02-27
 ---

package/bundled-skills/rclone-cli/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: rclone-cli
 description: Rclone command-line cloud storage manager reference and usage guide. Use this skill whenever the user mentions rclone, or any task involving terminal-based cloud file operations such as upload, download, sync, copy, move, mount, or remote management. Triggers on S3-compatible storage,...
-risk: unknown
+risk: critical
 source: https://github.com/chaunsin/agent-skills/tree/master/skills/rclone-cli
 source_repo: chaunsin/agent-skills
 source_type: community

package/bundled-skills/react-flow-architect/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: react-flow-architect
 description: "Build production-ready ReactFlow applications with hierarchical navigation, performance optimization, and advanced state management."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/react-flow-node-ts/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: react-flow-node-ts
 description: "Create React Flow node components following established patterns with proper TypeScript types and store integration."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/react-state-management/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: react-state-management
 description: "Master modern React state management with Redux Toolkit, Zustand, Jotai, and React Query. Use when setting up global state, managing server state, or choosing between state management solutions."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/react-ui-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: react-ui-patterns
 description: "Modern React UI patterns for loading states, error handling, and data fetching. Use when building UI components, handling async data, or managing UI states."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/receiving-code-review/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: receiving-code-review
 description: "Code review requires technical evaluation, not emotional performance."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/red-team-tactics/SKILL.md

@@ -6,6 +6,20 @@ source: community
 date_added: "2026-02-27"
 ---
 
+> **⚠️ AUTHORIZED USE ONLY**
+> This skill is for educational purposes or authorized security assessments only.
+> You must have explicit, written permission from the system owner before using this tool.
+> Misuse of this tool is illegal and strictly prohibited.
+
+> **Mandatory confirmation gate**
+> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
+> 1. Ask the user to state the exact target URL, IP, account, or resource.
+> 2. Ask the user to confirm written authorization and the permitted scope.
+> 3. Show the exact command(s) and explain their expected effect.
+> 4. Wait for explicit confirmation in the current conversation.
+>
+> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
+
 > AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
 
 # Red Team Tactics

package/bundled-skills/red-team-tools/SKILL.md

@@ -7,6 +7,20 @@ author: zebbern
 date_added: "2026-02-27"
 ---
 
+> **⚠️ AUTHORIZED USE ONLY**
+> This skill is for educational purposes or authorized security assessments only.
+> You must have explicit, written permission from the system owner before using this tool.
+> Misuse of this tool is illegal and strictly prohibited.
+
+> **Mandatory confirmation gate**
+> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
+> 1. Ask the user to state the exact target URL, IP, account, or resource.
+> 2. Ask the user to confirm written authorization and the permitted scope.
+> 3. Show the exact command(s) and explain their expected effect.
+> 4. Wait for explicit confirmation in the current conversation.
+>
+> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
+
 > AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
 
 # Red Team Tools and Methodology

package/bundled-skills/redis-cli/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: redis-cli
 description: Redis command-line interface (redis-cli) reference and usage guide. Use this skill whenever the user mentions redis-cli, Redis CLI, or any task involving querying, inspecting, debugging, or managing Redis from the command line. Triggers on key/value reads and writes, SCAN or keyspace...
-risk: unknown
+risk: critical
 source: https://github.com/chaunsin/agent-skills/tree/master/skills/redis-cli
 source_repo: chaunsin/agent-skills
 source_type: community

package/bundled-skills/reference-builder/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: reference-builder
 description: Creates exhaustive technical references and API documentation. Generates comprehensive parameter listings, configuration guides, and searchable reference materials.
-risk: unknown
+risk: safe
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/referral-program/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: referral-program
 description: "You are an expert in viral growth and referral marketing with access to referral program data and third-party tools. Your goal is to help design and optimize programs that turn customers into growth engines."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---