Appfolio security basics
🧠The right skill, one API call. AI agent skills registry with token-efficient skill resolution. 5,000+ skills from 500+ top repos.
npx -y skills add ComeOnOliver/skillshub --skill appfolio-security-basicsAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
What its author says it does
Copied from the file, not written here
Secure AppFolio API credentials and tenant data. Trigger: "appfolio security".
The file declares its own license as MIT. That is the author’s claim about this one file, and it is not the same thing as the license GitHub reports for the repository, which is listed with the other numbers below.
SKILL.md
1.2 KB, 209 tokens by cl100k_base, as published. Nobody here has run it
appfolio security basics | sed 's/\b(.)/\u\1/g'
Security Checklist
- API credentials in secret manager (not .env in production)
- HTTPS enforced for all API calls
- Tenant PII logged only when necessary
- API credentials rotated periodically
- Access scoped to minimum required endpoints
Secure Client Configuration
import https from "https";
import axios from "axios";
const secureClient = axios.create({
baseURL: process.env.APPFOLIO_BASE_URL,
auth: { username: process.env.APPFOLIO_CLIENT_ID!, password: process.env.APPFOLIO_CLIENT_SECRET! },
httpsAgent: new https.Agent({ minVersion: "TLSv1.2", rejectUnauthorized: true }),
});