appfolio-webhooks-events
Handles AppFolio webhook events for real-time property management notifications, enabling seamless integration with CRM and accounting systems.
Install this skill
Security score
The appfolio-webhooks-events skill was audited on May 23, 2026 and we found 19 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 31 | "Authorization": `Bearer ${process.env.APPFOLIO_API_KEY}`, |
Fetch to external URL
| 28 | const response = await fetch("https://api.appfolio.com/v1/webhooks", { |
Webhook reference - potential data exfiltration
| 2 | name: appfolio-webhooks-events |
Webhook reference - potential data exfiltration
| 3 | description: 'Handle AppFolio webhook events for property management notifications. |
Webhook reference - potential data exfiltration
| 5 | Trigger: "appfolio webhook". |
Webhook reference - potential data exfiltration
| 19 | # AppFolio Webhooks & Events |
Webhook reference - potential data exfiltration
| 23 | AppFolio Stack delivers real-time webhook notifications for property management lifecycle events including tenant onboarding, lease execution, rent payments, and maintenance workflows. Use these webho |
Webhook reference - potential data exfiltration
| 25 | ## Webhook Registration |
Webhook reference - potential data exfiltration
| 28 | const response = await fetch("https://api.appfolio.com/v1/webhooks", { |
Webhook reference - potential data exfiltration
| 35 | url: "https://yourapp.com/webhooks/appfolio", |
Webhook reference - potential data exfiltration
| 37 | secret: process.env.APPFOLIO_WEBHOOK_SECRET, |
Webhook reference - potential data exfiltration
| 51 | .createHmac("sha256", process.env.APPFOLIO_WEBHOOK_SECRET!) |
Webhook reference - potential data exfiltration
| 67 | app.post("/webhooks/appfolio", express.raw({ type: "application/json" }), verifyAppFolioSignature, (req, res) => { |
Access to .env file
| 31 | "Authorization": `Bearer ${process.env.APPFOLIO_API_KEY}`, |
Access to .env file
| 37 | secret: process.env.APPFOLIO_WEBHOOK_SECRET, |
Access to .env file
| 51 | .createHmac("sha256", process.env.APPFOLIO_WEBHOOK_SECRET!) |
External URL reference
| 28 | const response = await fetch("https://api.appfolio.com/v1/webhooks", { |
External URL reference
| 35 | url: "https://yourapp.com/webhooks/appfolio", |
External URL reference
| 121 | - [AppFolio Stack APIs](https://www.appfolio.com/stack/partners/api) |