appfolio-reference-architecture
Provides a reference architecture for integrating property management systems with AppFolio, enhancing real-time data management and tenant services.
Install this skill
or
79/100
Security score
The appfolio-reference-architecture skill was audited on May 23, 2026 and we found 9 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 45
Template literal with variable interpolation in command context
SourceSKILL.md
| 45 | propertyIds.map(id => this.cache.getOrFetch(`prop:${id}`, () => this.client.get(`/properties/${id}`))) |
medium line 52
Template literal with variable interpolation in command context
SourceSKILL.md
| 52 | const property = await this.client.get(`/properties/${order.propertyId}`); |
low line 32
Webhook reference - potential data exfiltration
SourceSKILL.md
| 32 | Webhook Handler ←── AppFolio Events /work-orders |
low line 69
Webhook reference - potential data exfiltration
SourceSKILL.md
| 69 | // Webhook-driven invalidation: AppFolio events flush matching cache keys immediately |
low line 78
Webhook reference - potential data exfiltration
SourceSKILL.md
| 78 | async onWebhook(event: AppFolioEvent): Promise<void> { |
medium line 115
Webhook reference - potential data exfiltration
SourceSKILL.md
| 115 | | Lease webhook | Duplicate event delivery | Idempotency key on lease ID + event timestamp | |
low line 76
Access to .env file
SourceSKILL.md
| 76 | private queue = new Bull('appfolio-events', { redis: process.env.REDIS_URL }); |
low line 122
External URL reference
SourceSKILL.md
| 122 | - [AppFolio Stack APIs](https://www.appfolio.com/stack/partners/api) |
low line 123
External URL reference
SourceSKILL.md
| 123 | - [AppFolio Engineering Blog](https://engineering.appfolio.com) |
Scanned on May 23, 2026
View Security DashboardGitHub Stars 2.2K
Rate this skill
Categoryreal estate
UpdatedJune 10, 2026
claudeclaude-codefrontenddesignreactapidevopsmobilereal-estate-agentproperty-managerreal-estate-analystredisquickbooksxeroreal estate
jeremylongshore/claude-code-plugins-plus-skills