The Agent Skills Directory

[PROMPT_INJECTION]: The skill is susceptible to Indirect Prompt Injection because it retrieves and processes content from Klaviyo campaign messages and SMS bodies which may contain untrusted data.
Ingestion points: The KLAVIYO_GET_CAMPAIGN_MESSAGE tool retrieves message attributes including content.body and content.subject.
Capability inventory: The skill has the ability to list campaigns, inspect messages, and monitor send jobs.
Boundary markers: There are no specific delimiters or instructions provided to the agent to distinguish between tool output and instructions contained within the message content.
Sanitization: No sanitization or filtering of the retrieved content is performed before the agent processes it.
[EXTERNAL_DOWNLOADS]: The skill requires the configuration of an external MCP server endpoint at https://rube.app/mcp. While this is the intended mechanism for the skill's functionality, users should be aware that the agent will communicate with this external service to execute tools.

klaviyo-automation