Agent skill · security · jeremylongshore
apollo-security-basics
Apply Apollo.io API security best practices.
Why this skill is useful
Provides specific security practices and code snippets for managing Apollo.io API keys that the AI wouldn't reliably generate on its own.
What it needs
Requires apollo account access. About 4k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Apollo Security Basics Overview Security best practices for Apollo.io API integrations. Apollo API keys grant broad access to 275M+ contacts — a leaked key is a serious incident. This covers key management, PII redaction, data access controls, key rotation, and audit procedures. Prerequisites Valid Apollo.io API credentials Node.js 18+ Instructions Step 1: Secure API Key Storage Apollo supports two key types with different risk profiles: Standard key: search + enrichment only (lower risk) Master key: full CRM access including delete (highest risk) Step 2: PII Redaction for Logging Apollo responses contain emails, phone numbers, and LinkedIn profiles. Never log raw responses in production. Step 3: Use Minimal Key Permissions Step 4: API Key Rotation Procedure Step 5: Security Audit Script Output Secure API key loading from env vars or GCP Secret Manager PII redaction utility for emails, phones, API keys, and LinkedIn URLs Scoped clients: read-only (standard key) vs full-access (master key) Key rotation procedure with verification Automated security audit checking for hardcoded keys and header auth Examples For a scheduled key rotation, assign a credential owner and change window, create the replacement in the provider console, and inject it into the secret manager without placing either key in a ticket, commit, or shell history. Run the health check from the new deployed revision, inspect redacted audit events, and only then revoke the prior key. If the replacement cannot authenticate, the new revision shows unexpected master-key use, or the audit finds a possible source or log exposure, abort the rotation, contain the affected key, and open an incident before retrying. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/apollo-security-basics