Skip to main content

appfolio-local-dev-loop

Facilitates local development for AppFolio API integration, enabling rapid testing with mock data and seamless deployment validation.

Install this skill

or
67/100

Security score

The appfolio-local-dev-loop skill was audited on May 24, 2026 and we found 11 security issues across 4 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 50

Template literal with variable interpolation in command context

SourceSKILL.md
50headers: { Authorization: `Bearer ${process.env.APPFOLIO_API_KEY}` },
medium line 56

Template literal with variable interpolation in command context

SourceSKILL.md
56app.listen(3001, () => console.log(`AppFolio dev server on :3001 [mock=${MOCK}]`));
high line 90

Curl to non-GitHub URL

SourceSKILL.md
90- Use `curl -v http://localhost:3001/api/v1/properties` to inspect raw responses
low line 28

Access to .env file

SourceSKILL.md
28cp .env.example .env
low line 45

Access to .env file

SourceSKILL.md
45const MOCK = process.env.MOCK_MODE === "true";
low line 48

Access to .env file

SourceSKILL.md
48target: process.env.APPFOLIO_BASE_URL,
low line 50

Access to .env file

SourceSKILL.md
50headers: { Authorization: `Bearer ${process.env.APPFOLIO_API_KEY}` },
low line 31

External URL reference

SourceSKILL.md
31# APPFOLIO_BASE_URL=https://api.appfolio.com/api/v1
low line 90

External URL reference

SourceSKILL.md
90- Use `curl -v http://localhost:3001/api/v1/properties` to inspect raw responses
low line 107

External URL reference

SourceSKILL.md
107- [AppFolio Stack APIs](https://www.appfolio.com/stack/partners/api)
low line 108

External URL reference

SourceSKILL.md
108- [AppFolio Engineering Blog](https://engineering.appfolio.com)
Scanned on May 24, 2026
View Security Dashboard
Installation guide →