The Agent Skills Directory

[DATA_EXFILTRATION]: The skill is designed to collect diagnostic information, including application logs from logs/ and /var/log/app/, and environment metadata. While this involves sensitive data exposure, the skill implements redaction logic using sed to mask Klaviyo API keys (prefixes starting with pk_) and email addresses within the collected files before they are archived into a local tarball.\n- [EXTERNAL_DOWNLOADS]: The generated script makes network requests via curl to a.klaviyo.com for API authentication testing and to status.klaviyo.com for service health monitoring. These requests target official Klaviyo infrastructure.\n- [COMMAND_EXECUTION]: The skill provides instructions to assemble and execute a shell script (klaviyo-debug-bundle.sh) that utilizes system tools such as nslookup, curl, grep, sed, and tar.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from application logs, which could theoretically contain malicious instructions designed to influence the agent's behavior during the analysis of the collected bundle.\n
Ingestion points: Log files scanned in logs/ and /var/log/app/ (identified in references/implementation.md).\n
Boundary markers: None provided to isolate untrusted log content from the agent's processing instructions.\n
Capability inventory: The script uses curl, tar, grep, sed, npm, and nslookup (specified in SKILL.md and references/implementation.md).\n
Sanitization: The skill applies regex-based redaction to remove API keys and email addresses from the logs.\n- [DYNAMIC_EXECUTION]: The workflow involves generating a shell script from provided templates and executing it. Additionally, it uses a Python one-liner (python3 -c ...) to parse JSON output from the Klaviyo status API.

klaviyo-debug-bundle