apollo-security-basics
Apply Apollo.io API security best practices. Use when securing Apollo integrations, managing API keys, or implementing secure data handling. Trigger with phrases like "apollo security", "secure apollo api", "apollo api key security", "apollo data protection".
Install with Tessl CLI
npx tessl i github:jeremylongshore/claude-code-plugins-plus-skills --skill apollo-security-basics88
Quality
83%
Does it follow best practices?
Impact
100%
1.56xAverage score across 3 eval scenarios
Evaluation results
100%
Apollo Integration Bootstrap
API key security setup
No hardcoded API key
100%
100%
Environment variable usage
100%
100%
Startup validation
100%
100%
HTTPS base URL
100%
100%
Request timeout set
100%
100%
.gitignore covers .env
100%
100%
.gitignore covers key files
100%
100%
.gitignore covers local env variants
100%
100%
SECURITY.md explains env var approach
100%
100%
SECURITY.md mentions .gitignore
100%
100%
Without context: $0.3846 · 3m 9s · 24 turns · 24 in / 4,836 out tokens
With context: $0.5663 · 3m 28s · 30 turns · 28 in / 5,477 out tokens
100%
74%Apollo Integration Logging Layer
PII redaction and secure logging
Uses pino logger
0%
100%
Pino redact paths present
0%
100%
Pino censor value
0%
100%
PII fields list
75%
100%
Email redaction format
0%
100%
Phone redaction format
50%
100%
redactPII handles arrays
100%
100%
Interceptor logs bodyKeys only
0%
100%
Interceptor logs type field
0%
100%
REDACTION_SPEC documents email format
0%
100%
REDACTION_SPEC documents phone format
77%
100%
Without context: $0.8074 · 4m 14s · 35 turns · 36 in / 11,845 out tokens
With context: $0.8058 · 3m 55s · 32 turns · 290 in / 7,947 out tokens
100%
33%Apollo API Access Manager
Role-based access and cache design
Three key roles defined
90%
100%
Read ops use readonly key
100%
100%
Admin ops use admin key
30%
100%
Keys from env vars
0%
100%
Cache TTL is 15 minutes
0%
100%
Cache max entries 1000
100%
100%
Evicts oldest on overflow
100%
100%
Periodic cleanup interval
50%
100%
Expired entries not returned
100%
100%
DESIGN.md covers access control
100%
100%
DESIGN.md covers TTL rationale
71%
100%
Without context: $0.3930 · 3m 12s · 18 turns · 18 in / 7,245 out tokens
With context: $0.5188 · 3m 12s · 26 turns · 26 in / 7,480 out tokens
- Evaluated
- Agent
- Claude Code
- Model
- Claude Sonnet 4.6
Table of Contents
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.