Apollo Debug BundleSAFE
Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.
Overview
Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.
4f83675ca38aOBSERVED · 2026-10-08Host compatibility
What the documentation claims. We have not run a compatibility test.
| Host | Status | Notes |
|---|---|---|
| claude-code | mentioned |
What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: apollo-debug-bundle description: 'Collect Apollo.io debug evidence for support. Use when preparing support tickets, documenting issues, or gathering diagnostic information for Apollo problems. Trigger with phrases like "apollo debug", "apollo support bundle", "collect apollo diagnostics", "apollo troubleshooting info". ' allowed-tools: Read, Grep, Bash(curl:*) version: 1.13.0 license: MIT author: Jeremy Longshore <[email protected]> tags: - saas - apollo - debugging compatibility: Designed for Claude Code --- # Apollo Debug Bundle ## Current State !`node --version 2>/dev/null || echo 'N/A'` !`python3 --version 2>/dev/null || echo 'N/A'` !`uname -a` ## Overview Collect comprehensive debug information for Apollo.io API issues. Generates a JSON diagnostic bundle with environment info, connectivity tests, rate limit status, key type verification, and sanitized request/response logs. ## Prerequisites - `APOLLO_API_KEY` environment variable set - Node.js 18+ or Python 3.10+ ## Instructions ### Step 1: Create the Debug Bundle Collector ```typescript // src/scripts/debug-bundle.ts import axios from 'axios'; import os from 'os'; const BASE_URL = 'https://api.apollo.io/api/v1'; interface DebugBundle { timestamp: string; environment: Record<string, string>; connectivity: { reachable: boolean; latencyMs: number; statusCode?: number }; keyType: 'master' | 'standard' | 'invalid' | 'unknown'; rateLimits: { limit?: string; remaining?: string; window?: string }; endpointTests: Array<{ endpoint: string; status: number | string; ok: boolean }>; systemInfo: Record<string, string>; } async function collectDebugBundle(): Promise<DebugBundle> { const headers = { 'Content-Type': 'application/json', 'x-api-key': process.env.APOLLO_API_KEY ?? '', }; const bundle: DebugBundle = { timestamp: new Date().toISOString(), environment: { nodeVersion: process.version, platform: os.platform(), arch: os.arch(), apiKeySet: process.env.APOLLO_API_KEY ? 'yes (redacted)' : 'NOT SET', apiKeyLength: String(process.env.APOLLO_API_KEY?.length ?? 0), apiKeyPrefix: process.env.APOLLO_API_KEY?.slice(0, 4) + '...' ?? 'N/A', }, connectivity: { reachable: false, latencyMs: 0 }, keyType: 'unknown', rateLimits: {}, endpointTests: [], systemInfo: {}, }; return bundle; } ``` ### Step 2: Test Connectivity and Key Type ```typescript async function testConnectivity(bundle: DebugBundle) { const headers = { 'Content-Type': 'application/json', 'x-api-key': process.env.APOLLO_API_KEY! }; // Test basic auth const start = Date.now(); try { const resp = await axios.get(`${BASE_URL}/auth/health`, { headers, timeout: 10_000 }); bundle.connectivity = { reachable: true, latencyMs: Date.now() - start, statusCode: resp.status }; bundle.keyType = resp.data.is_logged_in ? 'standard' : 'invalid'; // at minimum standard } catch (err: any) { bundle.connectivity = { reachable: false, latencyMs: Date.now() - start, statusCode: err.response?.status }; return; } // Test master key access try { await axios.post(`${BASE_URL}/contacts/search`, { per_page: 1 }, { headers, timeout: 10_000 }); bundle.keyType = 'master'; } catch (err: any) { if (err.response?.status === 403) bundle.keyType = 'standard'; } } ``` ### Step 3: Test Key Endpoints ```typescript async function testEndpoints(bundle: DebugBundle) { const headers = { 'Content-Type': 'application/json', 'x-api-key': process.env.APOLLO_API_KEY! }; const tests = [ { name: 'Auth Health', method: 'GET', url: `${BASE_URL}/auth/health` }, { name: 'People Search', method: 'POST', url: `${BASE_URL}/mixed_people/api_search`, body: { per_page: 1, q_organization_domains_list: ['apollo.io'] } }, { name: 'Org Enrichment', method: 'GET', url: `${BASE_URL}/organizations/enrich?domain=apollo.io` }, { name: 'Contacts Search', method: 'POST', url: `${BASE_URL}/contacts/search`, body: { per_page: 1 } }, { name: 'Sequences Search', method: 'POST', url: `${BASE_URL}/emailer_campaigns/search`, body: { per_page: 1 } }, { name: 'Email Accounts', method: 'GET', url: `${BASE_URL}/email_accounts` }, ]; for (const test of tests) { try { const resp = await axios({ method: test.method as any, url: test.url, data: test.body, headers, timeout: 10_000 }); bundle.endpointTests.push({ endpoint: test.name, status: resp.status, ok: true }); // Capture rate limit headers from any successful response if (resp.headers['x-rate-limit-limit']) { bundle.rateLimits = { limit: resp.headers['x-rate-limit-limit'], remaining: resp.headers['x-rate-limit-remaining'], window: resp.headers['x-rate-limit-window'], }; } } catch (err: any) { bundle.endpointTests.push({ endpoint: test.name, status: err.response?.status ?? err.code ?? err.message, ok: false, }); } } } ``` ### Step 4: Generate and Output ```typescript async function main() { console.log('Collecting Apollo debug bundle...\n'); const bundle = await collectDebugBundle(); await testConnectivity(bundle); await testEndpoints(bundle); // System info bundle.systemInfo = { hostname: os.hostname(), platform: `${os.platform()} ${os.release()}`, memory: `${Math.round(os.freemem() / 1024 / 1024)}MB free / ${Math.round(os.totalmem() / 1024 / 1024)}MB total`, }; // Write to file const fs = await import('fs'); const filename = `apollo-debug-${Date.now()}.json`; fs.writeFileSync(filename, JSON.stringify(bundle, null, 2)); // Print summary console.log('=== Apollo Debug Summary ==='); console.log(`API Key: ${bundle.environment.apiKeySet} (${bundle.environment.apiKeyLength} chars)`); console.log(`Key Type: ${bundle.keyType}`); console.log(`Reachable: ${bundle.connectivity.reachable} (${bundle.connectivity
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
4f83675ca38afull audit observations/trust-audit/skill/jeremylongshore__apollo-debug-bundle.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 4f83675ca38a | SAFE | B | 89 | first audit |
Questions
What does the Apollo Debug Bundle skill do?
Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.
Is Apollo Debug Bundle safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Apollo Debug Bundle access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does Apollo Debug Bundle work with?
Its documentation mentions claude-code. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (4f83675ca38a), read on 2026-10-08. The repository is watched, and a new audit runs when it changes — this is the first audit.