Skip to main content

pp-apartments

This CLI skill helps users efficiently track and analyze apartment listings with advanced features for relocation and market insights.

Install this skill

or
83/100

Security score

The pp-apartments skill was audited on Jun 6, 2026 and we found 5 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 315

Webhook reference - potential data exfiltration

SourceSKILL.md
315| `webhook:<url>` | POST the output body to the URL (`application/json` or `application/x-ndjson` when `--compact`) |
medium line 317

Webhook reference - potential data exfiltration

SourceSKILL.md
317Unknown schemes are refused with a structured error naming the supported set. Webhook failures return non-zero and log the URL + HTTP status on stderr.
medium line 303

Access to hidden dotfiles in home directory

SourceSKILL.md
303Entries are stored locally at `~/.apartments-pp-cli/feedback.jsonl`. They are never POSTed unless `APARTMENTS_FEEDBACK_ENDPOINT` is set AND either `--send` is passed or `APARTMENTS_FEEDBACK_AUTO_SEND=
low line 83

External URL reference

SourceSKILL.md
83apartments-pp-cli history https://www.apartments.com/example-property-1234 --json
low line 145

External URL reference

SourceSKILL.md
145apartments-pp-cli shortlist add https://www.apartments.com/example-1234 --tag austin --note "liked the kitchen"
Scanned on Jun 6, 2026
View Security Dashboard
Installation guide →