The Agent Skills Directory

[SAFE]: All network operations are directed towards official Klaviyo domains (a.klaviyo.com, static.klaviyo.com), which are recognized as safe, well-known service endpoints.
[SAFE]: The skill recommends installing the official 'klaviyo-api' package via standard, trusted registries (NPM and PyPI).
[SAFE]: Instructions for managing credentials correctly identify the use of environment variables and the creation of a 'credentials.md' file for secure storage, avoiding the exposure of actual secrets in code.
[PROMPT_INJECTION]: The skill provides an interface for processing external data such as customer emails, phone numbers, and event properties, which represents an indirect prompt injection surface.
Ingestion points: Data received through the 'upsertProfile', 'trackEvent', and 'updateProfileProperties' functions in SKILL.md.
Boundary markers: Not included in the sample code snippets.
Capability inventory: The skill performs network requests and file access to read environment configurations.
Sanitization: Not demonstrated in the provided code examples, relying on implementation-level validation.

klaviyo