Skip to main content

klaviyo-hello-world

Creates a minimal working example for Klaviyo API integration, enabling profile creation and event tracking.

Install this skill

or
70/100

Security score

The klaviyo-hello-world skill was audited on May 28, 2026 and we found 10 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 127

Template literal with variable interpolation in command context

SourceSKILL.md
127console.log(`Found: ${p.attributes.firstName} ${p.attributes.lastName}`);
medium line 128

Template literal with variable interpolation in command context

SourceSKILL.md
128console.log(`ID: ${p.id}`);
medium line 129

Template literal with variable interpolation in command context

SourceSKILL.md
129console.log(`Created: ${p.attributes.created}`);
medium line 159

Template literal with variable interpolation in command context

SourceSKILL.md
159console.log(`Profile created: ${profile.body.data.id}`);
medium line 179

Template literal with variable interpolation in command context

SourceSKILL.md
179console.log(`Verified: ${result.body.data[0]?.attributes.firstName}`);
low line 53

Access to .env file

SourceSKILL.md
53const session = new ApiKeySession(process.env.KLAVIYO_PRIVATE_KEY!);
low line 144

Access to .env file

SourceSKILL.md
144const session = new ApiKeySession(process.env.KLAVIYO_PRIVATE_KEY!);
low line 217

External URL reference

SourceSKILL.md
217- [Create Profile API](https://developers.klaviyo.com/en/reference/create_profile)
low line 218

External URL reference

SourceSKILL.md
218- [Create Event API](https://developers.klaviyo.com/en/reference/create_event)
low line 219

External URL reference

SourceSKILL.md
219- [Get Profiles API](https://developers.klaviyo.com/en/reference/get_profiles)
Scanned on May 28, 2026
View Security Dashboard
Installation guide →