klaviyo-core-workflow-a
Facilitates managing profiles, lists, and subscriptions in Klaviyo for effective email and SMS marketing campaigns.
Install this skill
or
85/100
Security score
The klaviyo-core-workflow-a skill was audited on May 28, 2026 and we found 7 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 111
Template literal with variable interpolation in command context
SourceSKILL.md
| 111 | console.log(`${l.attributes.name} (${l.id})`); |
medium line 225
Template literal with variable interpolation in command context
SourceSKILL.md
| 225 | console.log(`Imported ${Math.min(i + 100, profiles.length)}/${profiles.length}`); |
low line 43
Access to .env file
SourceSKILL.md
| 43 | const session = new ApiKeySession(process.env.KLAVIYO_PRIVATE_KEY!); |
low line 248
External URL reference
SourceSKILL.md
| 248 | - [Profiles API](https://developers.klaviyo.com/en/reference/profiles_api_overview) |
low line 249
External URL reference
SourceSKILL.md
| 249 | - [Lists API](https://developers.klaviyo.com/en/reference/lists_api_overview) |
low line 250
External URL reference
SourceSKILL.md
| 250 | - [Subscribe Profiles](https://developers.klaviyo.com/en/reference/bulk_subscribe_profiles) |
low line 251
External URL reference
SourceSKILL.md
| 251 | - [Consent Collection Guide](https://developers.klaviyo.com/en/docs/collect_email_and_sms_consent_via_api) |
Scanned on May 28, 2026
View Security DashboardGitHub Stars 2.4K
Rate this skill
Categorymarketing
UpdatedOctober 27, 2026
jeremylongshore/claude-code-plugins-plus-skills