klaviyo-common-errors
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes application logs and error messages which could contain untrusted data from external sources.
- Ingestion points: Read and Grep tools are used to ingest log lines and stack traces (SKILL.md).
- Capability inventory: The skill can execute Bash for npm installs and curl requests to diagnostic endpoints (SKILL.md, references/diagnostics.md).
- Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are defined for the log data processing.
- Sanitization: The skill does not perform sanitization or validation of the log content before analysis.
- [SAFE]: The skill performs network operations to well-known Klaviyo service domains (a.klaviyo.com, status.klaviyo.com) for diagnostic connectivity checks (references/diagnostics.md).
- [SAFE]: The skill references the installation of the official klaviyo-api package from the public NPM registry (SKILL.md).
- [SAFE]: The skill employs environment variables for API key management, avoiding hardcoded credentials in the source code (SKILL.md).
Audit Metadata