lifecycle-marketing-automation
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected in the skill's instructions, code snippets, or metadata.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill demonstrates safe credential handling by instructing users to use environment variables (
process.env.KLAVIYO_PRIVATE_KEY) for API authentication rather than hardcoding secrets. - [EXTERNAL_DOWNLOADS]: Mentions installing the AutomateWoo plugin from the official WooCommerce marketplace, which is a standard procedure for the skill's intended marketing purpose.
- [INDIRECT_PROMPT_INJECTION]: While the skill handles external data (customer emails and lifecycle stages), the data ingestion is limited to structured API updates to the well-known Klaviyo service, and no exploitable capabilities were identified.
Audit Metadata