Skip to main content

klaviyo-debug-bundle

Collects diagnostic information for Klaviyo support tickets, aiding in troubleshooting and API connectivity issues.

Install this skill

or
69/100

Security score

The klaviyo-debug-bundle skill was audited on May 31, 2026 and we found 11 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 56

Template literal with variable interpolation in command context

SourceSKILL.md
56```bash
medium line 81

Template literal with variable interpolation in command context

SourceSKILL.md
81```bash
medium line 186

Template literal with variable interpolation in command context

SourceSKILL.md
186error: `${error.status || 'N/A'}: ${error.body?.errors?.[0]?.detail || error.message}`,
medium line 108

Curl to non-GitHub URL

SourceSKILL.md
108curl -s "https://status.klaviyo.com/api/v2/status.json" 2>/dev/null \
medium line 207

Webhook reference - potential data exfiltration

SourceSKILL.md
207- Webhook secrets
low line 169

Access to .env file

SourceSKILL.md
169const session = new ApiKeySession(process.env.KLAVIYO_PRIVATE_KEY!);
low line 95

External URL reference

SourceSKILL.md
95"https://a.klaviyo.com/api/accounts/" 2>/dev/null || echo "000")
low line 102

External URL reference

SourceSKILL.md
102"https://a.klaviyo.com/api/profiles/?page[size]=1" 2>/dev/null \
low line 108

External URL reference

SourceSKILL.md
108curl -s "https://status.klaviyo.com/api/v2/status.json" 2>/dev/null \
low line 220

External URL reference

SourceSKILL.md
220- [Klaviyo Status Page](https://status.klaviyo.com)
low line 221

External URL reference

SourceSKILL.md
221- [API Error Alerts](https://developers.klaviyo.com/en/docs/review_api_error_alerts)
Scanned on May 31, 2026
View Security Dashboard
Installation guide →