appfolio-deploy-integration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by explicitly instructing the user to use a secret manager and environment variables instead of hardcoding credentials in the Docker image or deployment scripts.
- [SAFE]: The provided Dockerfile uses a non-root user (
USER app) and implements health checks using a local-only liveness endpoint, minimizing the attack surface of the container. - [SAFE]: The skill uses deterministic dependency installation (
npm ci) in the build stage, which is a standard security practice for Node.js projects to ensure build integrity. - [SAFE]: All external references are to the official AppFolio documentation, which is a well-known service relevant to the skill's stated purpose.
Audit Metadata