The Agent Skills Directory

[SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The skill follows industry standard practices for API integration and secret management.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface through CSV imports and webhook testing. This risk is effectively mitigated by robust input validation logic.
Ingestion points: The import-csv tool in scripts/dev_tools.py and scripts/klaviyo_client.py processes external CSV files. The test-webhook tool in scripts/dev_tools.py processes responses from external endpoints.
Boundary markers: Data is processed via structured operations (API calls and file parsing) rather than being directly interpolated into high-privilege prompts.
Capability inventory: The skill uses network operations for Klaviyo API interaction and webhook connectivity checks, and file system writes for data export tasks.
Sanitization: The scripts implement _safe_output_path and _safe_input_file to prevent path traversal, and _validate_webhook_url to prevent SSRF by blocking access to private networks, loopback addresses, and cloud metadata services.

klaviyo-developer