The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill demonstrates an attack surface for indirect prompt injection by processing external user data.
Ingestion points: The --profiles-json argument in klaviyo_sync_audience and --properties in klaviyo_track_event (found in SKILL.md) allow arbitrary JSON input.
Boundary markers: The documentation does not specify the use of delimiters or instructions to ignore embedded commands within this data.
Capability inventory: The skill utilizes the run_ppc_script tool to interact with the Klaviyo platform, including creating and sending campaigns.
Sanitization: No evidence of data sanitization or validation is provided in the documentation for the ingested JSON payloads.

klaviyo-campaigns