appfolio-core-workflow-a
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or security vulnerabilities were identified. The skill provides legitimate developer instructions and code snippets for interacting with a well-known property management platform.
- [CREDENTIALS_SAFE]: The skill correctly demonstrates the use of environment variables (
APPFOLIO_CLIENT_IDandAPPFOLIO_CLIENT_SECRET) to handle sensitive API credentials, preventing the risk of hardcoded secrets. - [EXTERNAL_DOWNLOADS]: The skill facilitates network communication with official AppFolio API domains (
api.appfolio.com). These interactions are limited to well-known service endpoints consistent with the skill's primary function. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external API responses, which serves as an ingestion point for untrusted data. However, the risk is negligible within the context of structured property management data, and the skill includes guidance on validating records before performing writes.
Audit Metadata