klaviyo-cost-tuning
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the external Klaviyo API and uses it to perform sensitive actions like profile suppression. This establishes an attack surface where malicious content within a Klaviyo profile could attempt to influence the agent's logic.
- Ingestion points: Data enters the context via
profilesApi.getProfilesandsegmentsApi.getSegmentProfilesas defined inSKILL.mdandreferences/implementation.md. - Boundary markers: No delimiters or instructions are provided to help the agent isolate external data from its core instructions.
- Capability inventory: The skill possesses the ability to modify external state through the Klaviyo SDK and has access to local file system tools (
Read,Write,Edit). - Sanitization: The instructions do not define requirements for validating or filtering data retrieved from the API before it is processed.
Audit Metadata