Skills list-segment-builder

📦

list-segment-builder

Name: list-segment-builder
Author: aaron-he-zhu

v19.0.0 Content revision r2 Safe ⚙️ External commands🌐 Network access📁 Filesystem access

Build safer email audience segments

Email exports often mix active subscribers, lapsed customers, and people who must not receive messages. This skill converts your own exported data into documented segments and a suppression list with clear confidence labels.

Supports: Claude Codex Code(CC)

🥈 82 Silver

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "list-segment-builder" from https://skillstore.io/skills/aaron-he-zhu-list-segment-builder.md and its manifest at https://skillstore.io/api/skills/aaron-he-zhu-list-segment-builder/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/aaron-he-zhu-list-segment-builder.md Signed manifest GET /api/skills/aaron-he-zhu-list-segment-builder/manifest Signed lockfile GET /api/skills/aaron-he-zhu-list-segment-builder/lockfile

Test it

Using "list-segment-builder". An ESP export with open date, click date, unsubscribe status, and purchase date.

Expected outcome:

Engaged-90d: opened or clicked within 90 days; Measured count: 4,120.
Lapsed: no open or click for 180 days; Measured count: 1,860.
Suppression: unsubscribed or hard-bounced; Measured count: 342.

Using "list-segment-builder". An order export with recency, order count, and revenue fields.

Expected outcome:

Champion tier: recent purchasers with frequent, high-value orders.
At-risk tier: previously active customers with declining purchase recency.
Each tier includes its source fields, rule, count, and data-quality notes.

Security Audit

Safe

v6 • 7/26/2026 Open versioned report

Most static findings are false positives caused by Markdown code fences, inline code, and relative documentation links. One documented Resend command can perform a live suppression update when invoked with --live; it should require a clear user confirmation immediately before execution. No prompt-injection or data-exfiltration intent was found.

Files scanned

Lines analyzed

Review items

False positives ignored

Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:52

Ruby/shell backtick execution

**Zero-dependency ESP sync (when Resend is the ESP)**: `python3 "${CLAUDE_PLUGIN_ROOT}/scripts/conne

This documentation instructs an agent to run a Python connector and states that the suppress subcommand mutates Resend when --live is supplied. The operation affects a remote ESP, so execution requires an explicit user confirmation.

Risk Factors

⚙️ External commands (18)

SKILL.md:22-24 SKILL.md:24-26 SKILL.md:26-28 SKILL.md:28-30 SKILL.md:30-32 SKILL.md:32-38 SKILL.md:38-39 SKILL.md:39-40 SKILL.md:40 SKILL.md:50 SKILL.md:52 SKILL.md:60 SKILL.md:63-66 SKILL.md:66-70 SKILL.md:70-75 SKILL.md:75-80 SKILL.md:80 SKILL.md:86-87

🌐 Network access (2)

SKILL.md:10 SKILL.md:13

📁 Filesystem access (21)

Audited by: claude View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/aaron-he-zhu-list-segment-builder/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/aaron-he-zhu-list-segment-builder/security.svg)](https://skillstore.io/skills/aaron-he-zhu-list-segment-builder?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/aaron-he-zhu-list-segment-builder?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/aaron-he-zhu-list-segment-builder/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/aaron-he-zhu-list-segment-builder.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

aaron-he-zhu. (2026). list-segment-builder security audit report (audit version 6) [Author version 19.0.0]. Skillstore. https://skillstore.io/skills/aaron-he-zhu-list-segment-builder/audits/6

BibTeX citation

@techreport{aaron-he-zhu-aaron-he-zhu-list-segment-builder-2026,
  author = {aaron-he-zhu},
  title = {list-segment-builder security audit report (audit version 6)},
  institution = {Skillstore},
  year = {2026},
  number = {6},
  url = {https://skillstore.io/skills/aaron-he-zhu-list-segment-builder/audits/6},
  note = {Author version 19.0.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "list-segment-builder security audit report (audit version 6)"
version: "19.0.0"
type: report
authors:
  - name: "aaron-he-zhu"
date-released: "2026-07-26"
url: "https://skillstore.io/skills/aaron-he-zhu-list-segment-builder/audits/6"
identifiers:
  - type: other
    value: "skillstore:aaron-he-zhu-list-segment-builder:audit:6"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

100

Maintainability

Content

Community

100

Spec Compliance

What You Can Build

Prepare a retention campaign audience

Separate active, at-risk, and lapsed subscribers before planning a retention campaign.

Create customer value tiers

Turn an ecommerce order export into RFM tiers with transparent rules and missing-data flags.

Improve suppression hygiene

Reconcile exported unsubscribe and bounce signals with consent records before a planned send.

Try These Prompts

Start with an export

Build email segments from my attached subscriber export. My goal is retention.

Create engagement audiences

Using this CSV, define engaged-90d, lapsed, and cart-abandoner segments. Show the rule and measured size for each.

Build RFM and lifecycle tiers

Use my CRM and order exports to create RFM tiers and lifecycle stages. Flag any required columns that are missing.

Reconcile a suppression list

Compare these campaign and consent exports. Build a do-not-mail rule set and identify cohorts that need consent verification.

Best Practices

Provide exports with column names and date ranges, not only screenshots.
Review suppression and consent rules before using any segment in a campaign.
Use measured counts where possible and document every estimated rule.

Avoid

Do not treat missing consent records as permission to email a cohort.
Do not create RFM tiers when order recency, frequency, or value data is absent.
Do not store or repeat raw email addresses and other personal data in summaries.

Frequently Asked Questions

What data can I provide?

Provide your own ESP, CRM, analytics, or ecommerce export, or paste its column names and aggregate values.

Can it create RFM segments?

Yes, when your data includes recency, frequency, and monetary fields. Otherwise, it marks RFM as NEEDS_INPUT.

Does it send email campaigns?

No. It defines audiences and suppression rules only.

How are segment sizes reported?

Counts are labeled Measured when calculated from exports or Estimated when inferred with a stated method.

How does it handle unsubscribes?

It includes unsubscribes, hard bounces, complaints, and withdrawn consent in the do-not-mail rule set.

Can it update Resend segments?

The documented connector can sync supported data, but any live mutation requires explicit confirmation and valid account access.

Developer Details

Author

aaron-he-zhu

License

Apache-2.0

Author version

v19.0.0

Skillstore revision

Repository

https://github.com/aaron-he-zhu/aaron-marketing-skills/tree/main/email/setup/list-segment-builder

Ref

0715a6e09ea875c8e28cb705ce87cc83045e69c1

Maintenance freshness

7/28/2026

Usage

4 downloads · 0 views

File structure

📄 SKILL.md