appfolio-prod-checklist
Ensures production readiness for AppFolio integrations with a comprehensive checklist covering compliance, error handling, and monitoring.
Install this skill
Security score
The appfolio-prod-checklist skill was audited on May 19, 2026 and we found 16 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 68 | const res = await fetch(`${baseUrl}/properties?limit=1`, { |
Template literal with variable interpolation in command context
| 69 | headers: { Authorization: `Bearer ${process.env.APPFOLIO_API_KEY}` }, |
Template literal with variable interpolation in command context
| 71 | checks.push({ name: 'API Connectivity', pass: res.ok, detail: res.ok ? 'Connected' : `HTTP ${res.status}` }); |
Template literal with variable interpolation in command context
| 77 | const res = await fetch(`${baseUrl}/work_orders?limit=1`, { |
Template literal with variable interpolation in command context
| 78 | headers: { Authorization: `Bearer ${process.env.APPFOLIO_API_KEY}` }, |
Template literal with variable interpolation in command context
| 80 | checks.push({ name: 'Work Orders', pass: res.ok, detail: res.ok ? 'Accessible' : `HTTP ${res.status}` }); |
Template literal with variable interpolation in command context
| 82 | for (const c of checks) console.log(`[${c.pass ? 'PASS' : 'FAIL'}] ${c.name}: ${c.detail}`); |
Webhook reference - potential data exfiltration
| 40 | - [ ] Webhook endpoints configured for tenant and payment events |
Access to .env file
| 65 | const baseUrl = process.env.APPFOLIO_BASE_URL || 'https://api.appfolio.com/v1'; |
Access to .env file
| 69 | headers: { Authorization: `Bearer ${process.env.APPFOLIO_API_KEY}` }, |
Access to .env file
| 74 | checks.push({ name: 'API Key Set', pass: !!process.env.APPFOLIO_API_KEY, detail: process.env.APPFOLIO_API_KEY ? 'Present' : 'MISSING' }); |
Access to .env file
| 78 | headers: { Authorization: `Bearer ${process.env.APPFOLIO_API_KEY}` }, |
External URL reference
| 35 | - [ ] Production base URL configured (`https://api.appfolio.com/v1`) |
External URL reference
| 65 | const baseUrl = process.env.APPFOLIO_BASE_URL || 'https://api.appfolio.com/v1'; |
External URL reference
| 99 | - [AppFolio Stack APIs](https://www.appfolio.com/stack/partners/api) |
External URL reference
| 100 | - [AppFolio Engineering Blog](https://engineering.appfolio.com) |