klaviyo-automation

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [NO_CODE]: The skill consists entirely of markdown documentation and YAML metadata. It does not contain any executable scripts (Python, Node.js, Shell), eliminating the risk of direct malicious code execution or privilege escalation through the skill files themselves.
  • [SAFE]: The skill instructs the agent to interface with a specific external service (Rube MCP at rube.app/mcp). While this involves external communication, it is documented as the core functionality for the 'sickn33' author's service. The URLs and tool names (e.g., RUBE_SEARCH_TOOLS, KLAVIYO_GET_CAMPAIGNS) align with the stated purpose of campaign automation. No evidence of obfuscation, data exfiltration, or prompt injection was found.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 02:24 PM