appfolio-debug-bundle

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE]: The skill accesses environment variables for AppFolio credentials. It securely handles these by writing them to a temporary .netrc file with restricted permissions (chmod 600) and explicitly redacting them from the final debug report to prevent accidental exposure.
  • [COMMAND_EXECUTION]: The skill uses standard system tools like curl, jq, and tar to probe API endpoints and package diagnostic information. The usage is strictly limited to metadata collection (status codes, latency) and does not execute untrusted content.
  • [INDIRECT_PROMPT_INJECTION]: The skill interacts with the AppFolio API to verify connectivity. While it ingests external data, the impact is minimized because the script captures only HTTP metadata and header information rather than interpreting or displaying untrusted response bodies.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:44 AM
Security Audit — agent-trust-hub — appfolio-debug-bundle