Skip to main content

apollo-deploy-integration

Facilitates the deployment of Apollo.io integrations to production environments, ensuring proper configuration and health checks.

Install this skill

or
49/100

Security score

The apollo-deploy-integration skill was audited on May 27, 2026 and we found 17 security issues across 4 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 186

Direct command execution function call

SourceSKILL.md
186execSync('npm run build', { stdio: 'pipe' });
medium line 61

Template literal with variable interpolation in command context

SourceSKILL.md
61checks.apollo = resp.data.is_logged_in ? `ok (${Date.now() - start}ms)` : 'invalid key';
medium line 63

Template literal with variable interpolation in command context

SourceSKILL.md
63checks.apollo = `error: ${err.response?.status ?? err.message}`;
medium line 191

Template literal with variable interpolation in command context

SourceSKILL.md
191checks.forEach((c) => console.log(`${c.pass ? 'PASS' : 'FAIL'} ${c.name}`));
medium line 192

Template literal with variable interpolation in command context

SourceSKILL.md
192console.log(`\nDeploy: ${allPass ? 'READY' : 'BLOCKED'}`);
low line 185

Node child_process module reference

SourceSKILL.md
185const { execSync } = await import('child_process');
medium line 223

Webhook reference - potential data exfiltration

SourceSKILL.md
223Proceed to `apollo-webhooks-events` for webhook implementation.
low line 51

Access to .env file

SourceSKILL.md
51apiKey: process.env.APOLLO_API_KEY ? 'set' : 'MISSING',
low line 52

Access to .env file

SourceSKILL.md
52nodeEnv: process.env.NODE_ENV ?? 'not set',
low line 58

Access to .env file

SourceSKILL.md
58headers: { 'x-api-key': process.env.APOLLO_API_KEY! },
low line 173

Access to .env file

SourceSKILL.md
173checks.push({ name: 'APOLLO_API_KEY set', pass: !!process.env.APOLLO_API_KEY });
low line 178

Access to .env file

SourceSKILL.md
178headers: { 'x-api-key': process.env.APOLLO_API_KEY! },
low line 57

External URL reference

SourceSKILL.md
57const resp = await axios.get('https://api.apollo.io/api/v1/auth/health', {
low line 177

External URL reference

SourceSKILL.md
177const resp = await axios.get('https://api.apollo.io/api/v1/auth/health', {
low line 217

External URL reference

SourceSKILL.md
217- [GCP Secret Manager](https://cloud.google.com/secret-manager/docs)
low line 218

External URL reference

SourceSKILL.md
218- [Vercel Environment Variables](https://vercel.com/docs/concepts/projects/environment-variables)
low line 219

External URL reference

SourceSKILL.md
219- [Kubernetes Probes](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/)
Scanned on May 27, 2026
View Security Dashboard