klaviyo-local-dev-loop
Facilitates local development for Klaviyo integrations with hot reload, mocking, and testing capabilities.
Install this skill
or
76/100
Security score
The klaviyo-local-dev-loop skill was audited on May 28, 2026 and we found 12 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 192
Template literal with variable interpolation in command context
SourceSKILL.md
| 192 | const testEmail = `test-${Date.now()}@example.com`; |
medium line 202
Template literal with variable interpolation in command context
SourceSKILL.md
| 202 | filter: `equals(email,"${testEmail}")`, |
low line 55
Access to .env file
SourceSKILL.md
| 55 | ├── .env.local # Local secrets (git-ignored) |
low line 56
Access to .env file
SourceSKILL.md
| 56 | ├── .env.example # Template for team |
low line 57
Access to .env file
SourceSKILL.md
| 57 | ├── .env.test # Test environment (sandbox key) |
low line 64
Access to .env file
SourceSKILL.md
| 64 | # .env.example (commit this) |
low line 69
Access to .env file
SourceSKILL.md
| 69 | # .env.local (git-ignored, actual secrets) |
low line 104
Access to .env file
SourceSKILL.md
| 104 | const key = process.env.KLAVIYO_PRIVATE_KEY; |
low line 178
Access to .env file
SourceSKILL.md
| 178 | const SKIP = !process.env.KLAVIYO_TEST; |
low line 181
Access to .env file
SourceSKILL.md
| 181 | const session = new ApiKeySession(process.env.KLAVIYO_PRIVATE_KEY!); |
medium line 230
Access to .env file
SourceSKILL.md
| 230 | | `KLAVIYO_PRIVATE_KEY not set` | Missing .env.local | Copy from .env.example | |
low line 238
External URL reference
SourceSKILL.md
| 238 | - [Vitest Documentation](https://vitest.dev/) |
Scanned on May 28, 2026
View Security DashboardGitHub Stars 2.4K
Rate this skill
Categorymarketing
UpdatedOctober 27, 2026
jeremylongshore/claude-code-plugins-plus-skills