Skip to main content

klaviyo-core-workflow-b

Facilitates event tracking, segment management, and campaign creation using Klaviyo's API for enhanced email marketing workflows.

Install this skill

or
63/100

Security score

The klaviyo-core-workflow-b skill was audited on May 28, 2026 and we found 13 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 117

Template literal with variable interpolation in command context

SourceSKILL.md
117console.log(`${m.attributes.name} (${m.id})`);
medium line 127

Template literal with variable interpolation in command context

SourceSKILL.md
127console.log(`${event.attributes.datetime}: ${event.attributes.eventProperties?.orderId}`);
medium line 141

Template literal with variable interpolation in command context

SourceSKILL.md
141console.log(`${seg.attributes.name} (${seg.id}) - active: ${seg.attributes.isActive}`);
medium line 157

Template literal with variable interpolation in command context

SourceSKILL.md
157console.log(`Segment size: ${segmentWithCount.body.data.attributes.profileCount}`);
medium line 242

Template literal with variable interpolation in command context

SourceSKILL.md
242console.log(`${flow.attributes.name} - status: ${flow.attributes.status}`);
medium line 248

Template literal with variable interpolation in command context

SourceSKILL.md
248console.log(` Action: ${action.attributes.actionType} - ${action.attributes.status}`);
low line 49

Access to .env file

SourceSKILL.md
49const session = new ApiKeySession(process.env.KLAVIYO_PRIVATE_KEY!);
low line 99

External URL reference

SourceSKILL.md
99cartUrl: 'https://shop.example.com/cart/abc123',
low line 276

External URL reference

SourceSKILL.md
276- [Events API](https://developers.klaviyo.com/en/reference/events_api_overview)
low line 277

External URL reference

SourceSKILL.md
277- [Segments API](https://developers.klaviyo.com/en/reference/segments_api_overview)
low line 278

External URL reference

SourceSKILL.md
278- [Campaigns API](https://developers.klaviyo.com/en/reference/campaigns_api_overview)
low line 279

External URL reference

SourceSKILL.md
279- [Flows API](https://developers.klaviyo.com/en/reference/flows_api_overview)
low line 280

External URL reference

SourceSKILL.md
280- [Metrics API](https://developers.klaviyo.com/en/reference/metrics_api_overview)
Scanned on May 28, 2026
View Security Dashboard
Installation guide →