apollo-security-basics
Implements security best practices for Apollo.io API integrations, focusing on key management and data protection.
Install this skill
Security score
The apollo-security-basics skill was audited on Feb 21, 2026 and we found 21 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 170 | return `${local.substring(0, 2)}***@${domain}`; |
Template literal with variable interpolation in command context
| 173 | return `***-***-${value.slice(-4)}`; |
Access to .env file
| 28 | const apiKey = process.env.APOLLO_API_KEY; |
Access to .env file
| 31 | if (!process.env.APOLLO_API_KEY) { |
Access to .env file
| 38 | # .env file (never commit!) |
Access to .env file
| 42 | .env |
Access to .env file
| 43 | .env.local |
Access to .env file
| 44 | .env.*.local |
Access to .env file
| 62 | primary: process.env.APOLLO_API_KEY!, |
Access to .env file
| 63 | secondary: process.env.APOLLO_API_KEY_SECONDARY, |
Access to .env file
| 64 | rotateAt: process.env.APOLLO_KEY_ROTATE_AT |
Access to .env file
| 65 | ? new Date(process.env.APOLLO_KEY_ROTATE_AT) |
Access to .env file
| 282 | readonly: process.env.APOLLO_API_KEY_READONLY, |
Access to .env file
| 283 | standard: process.env.APOLLO_API_KEY_STANDARD, |
Access to .env file
| 284 | admin: process.env.APOLLO_API_KEY_ADMIN, |
Access to .env file
| 305 | - [ ] .env files added to .gitignore |
External URL reference
| 82 | const response = await axios.get('https://api.apollo.io/v1/auth/health', { |
External URL reference
| 117 | baseURL: 'https://api.apollo.io/v1', // Always HTTPS |
External URL reference
| 342 | - [Apollo Security Practices](https://www.apollo.io/security) |
External URL reference
| 343 | - [OWASP API Security](https://owasp.org/www-project-api-security/) |
External URL reference
| 344 | - [GDPR for API Developers](https://gdpr.eu/) |