Skip to main content

appfolio-core-workflow-a

Integrates with AppFolio API to build a comprehensive property management dashboard, managing properties, tenants, and leases.

Install this skill

or
67/100

Security score

The appfolio-core-workflow-a skill was audited on May 19, 2026 and we found 17 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 44

Template literal with variable interpolation in command context

SourceSKILL.md
44const headers = { Authorization: `Bearer ${token.access_token}`, 'Content-Type': 'application/json' };
medium line 62

Template literal with variable interpolation in command context

SourceSKILL.md
62console.log(`Property created: ${property.id}`);
medium line 90

Template literal with variable interpolation in command context

SourceSKILL.md
90`https://api.appfolio.com/v1/properties/${property.id}/units?status=vacant`,
medium line 93

Template literal with variable interpolation in command context

SourceSKILL.md
93console.log(`Vacant units: ${units.data.length} of ${units.meta.total}`);
low line 34

Fetch to external URL

SourceSKILL.md
34const token = await fetch('https://api.appfolio.com/oauth/token', {
low line 50

Fetch to external URL

SourceSKILL.md
50const property = await fetch('https://api.appfolio.com/v1/properties', {
low line 68

Fetch to external URL

SourceSKILL.md
68const tenant = await fetch('https://api.appfolio.com/v1/tenants', {
low line 76

Fetch to external URL

SourceSKILL.md
76await fetch('https://api.appfolio.com/v1/leases', {
low line 39

Access to .env file

SourceSKILL.md
39client_id: process.env.APPFOLIO_CLIENT_ID!,
low line 40

Access to .env file

SourceSKILL.md
40client_secret: process.env.APPFOLIO_CLIENT_SECRET!,
low line 34

External URL reference

SourceSKILL.md
34const token = await fetch('https://api.appfolio.com/oauth/token', {
low line 50

External URL reference

SourceSKILL.md
50const property = await fetch('https://api.appfolio.com/v1/properties', {
low line 68

External URL reference

SourceSKILL.md
68const tenant = await fetch('https://api.appfolio.com/v1/tenants', {
low line 76

External URL reference

SourceSKILL.md
76await fetch('https://api.appfolio.com/v1/leases', {
low line 90

External URL reference

SourceSKILL.md
90`https://api.appfolio.com/v1/properties/${property.id}/units?status=vacant`,
low line 113

External URL reference

SourceSKILL.md
113- [AppFolio Stack APIs](https://www.appfolio.com/stack/partners/api)
low line 114

External URL reference

SourceSKILL.md
114- [AppFolio Engineering Blog](https://engineering.appfolio.com)
Scanned on May 19, 2026
View Security Dashboard
Installation guide →