customerio-local-dev-loop
Facilitates local development workflows for Customer.io integrations, enabling efficient testing and environment management.
Install this skill
Security score
The customerio-local-dev-loop skill was audited on May 12, 2026 and we found 22 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 103 | const prefixedId = `${this.config.eventPrefix}${userId}`; |
Template literal with variable interpolation in command context
| 112 | const prefixedId = `${this.config.eventPrefix}${userId}`; |
Template literal with variable interpolation in command context
| 113 | const prefixedEvent = `${this.config.eventPrefix}${eventName}`; |
Template literal with variable interpolation in command context
| 125 | const prefixedId = `${this.config.eventPrefix}${userId}`; |
Template literal with variable interpolation in command context
| 169 | const TEST_PREFIX = `test_${Date.now()}_`; |
Template literal with variable interpolation in command context
| 179 | const id = `${TEST_PREFIX}${label}`; |
Template literal with variable interpolation in command context
| 196 | cio.identify(id, { email: `${id}@test.example.com` }) |
Template literal with variable interpolation in command context
| 202 | await cio.identify(id, { email: `${id}@test.example.com` }); |
Access to .env file
| 43 | # .env.development |
Access to .env file
| 51 | # .env.test |
Access to .env file
| 76 | siteId: process.env.CUSTOMERIO_SITE_ID ?? "", |
Access to .env file
| 77 | trackApiKey: process.env.CUSTOMERIO_TRACK_API_KEY ?? "", |
Access to .env file
| 78 | appApiKey: process.env.CUSTOMERIO_APP_API_KEY ?? "", |
Access to .env file
| 79 | region: process.env.CUSTOMERIO_REGION === "eu" ? RegionEU : RegionUS, |
Access to .env file
| 80 | dryRun: process.env.CUSTOMERIO_DRY_RUN === "true", |
Access to .env file
| 81 | eventPrefix: process.env.CUSTOMERIO_EVENT_PREFIX ?? "", |
Access to .env file
| 173 | process.env.CUSTOMERIO_SITE_ID!, |
Access to .env file
| 174 | process.env.CUSTOMERIO_TRACK_API_KEY!, |
Access to .env file
| 223 | npx dotenv -e .env.development -- npx vitest run tests/customerio.integration.test.ts |
Access to .env file
| 232 | "cio:verify": "dotenv -e .env.development -- tsx scripts/verify-customerio.ts", |
Access to .env file
| 233 | "cio:test": "dotenv -e .env.development -- vitest run tests/customerio.integration.test.ts", |
Access to .env file
| 252 | | Dev events in production | Wrong `.env` file loaded | Verify `NODE_ENV` and env file path | |