@affitor/affiliate-skills
AAffitor Affiliate Skills — Cursor Rules
Install
agr install @affitor/affiliate-skills --target cursorWrites 1 file into .cursor/rules/, pinned to git-598ae25b.
- .cursorrules
Document
Affitor Affiliate Skills — Cursor Rules
What This Repo Is
45 AI-powered skills for affiliate marketers. Each skill automates a specific workflow (content creation, program research, SEO, outreach, analytics, etc.) using live data from the Affitor API.
How Skills Work
- Each skill lives in
skills/<stage>/<skill-name>/SKILL.md SKILL.mdis a self-contained instruction file: it defines inputs, workflow steps, and expected outputs- Skills are designed to be chained — the output of one skill feeds the next
- Run a skill by reading its
SKILL.mdand executing the documented workflow
Directory Layout
skills/ # Skills grouped by stage (research, content, blog, landing, distribution, analytics, automation, meta)
registry.json # Master index of all 45 skills with metadata
API.md # Full Affitor API reference
prompts/ # Bootstrap prompt for any AI
shared/
references/ # Cross-skill reference docs (FTC rules, glossary, branding)
Affitor API
- Base URL:
https://openaffiliate.dev/api - Programs endpoint:
GET /programs?q=<text>&sort=<relevance|trending|new|top>&limit=<n> - Single program:
GET /programs/<slug> - Public, no API key or auth required
- Raw API fields (camelCase, nested):
slug,name,url,logo,category,commission.type,commission.rate,commission.duration,cookieDays,payout.*,description,shortDescription,tags[],stars,verified - CLI-normalized skill-facing fields (used in skill outputs):
reward_value— from commission.ratereward_type— from commission.typecookie_days— from cookieDaysstars_count— from stars
- Always fetch real data from the API. Never fabricate program details.
Key Rules
- FTC disclosure required — any content that promotes an affiliate program must include
a clear disclosure ("I may earn a commission..."). See
shared/references/ftc-compliance.md. - Data from API, not guesses — commission rates, cookie windows, and program names must come from live API responses.
- Portable output — skill outputs must work standalone (markdown, plain text, CSV). No platform-specific formatting unless the skill explicitly targets one.
- Follow the SKILL.md workflow exactly — each step is intentional. Don't skip steps.
- Chain outputs — skills are composable. Pass structured output from one skill as input to the next when building multi-step workflows.
Adding or Editing Skills
- Register new skills in
registry.json(stage, name, description, inputs, outputs) - Keep
SKILL.mdunder 150 lines — concise instruction, not documentation - Use frontmatter at the top of
SKILL.mdfor metadata (stage, version, inputs, outputs)
Trustgrade A
- passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
- passType matchnot applicable to this artifact type
Whether the artifact is really the kind of thing its metadata claims it is.
- passFreshness
How long since the source repository was last pushed to.
- passPrompt injection
Scans the artifact's own text for instructions aimed at your agent rather than at you.
- passLicense
Whether the source repository declares an SPDX license permissive enough to redistribute.
How the grade is calculated
Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:
- Aevery check passed
- Bone warning
- Ctwo warnings
- Dprompt injection or body integrity failed, or three warnings
- Fone of those failed, and something else is wrong
These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.
Versions
git-598ae25ba7422026-08-06