hubspot
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill performs legitimate CRM management tasks using standard methods.
- [SAFE]: Authentication tokens are stored in a dedicated local directory (
~/.config/hubspot/token) with restricted file permissions (0600), adhering to security best practices for credential management. - [SAFE]: Network activity is restricted to the official HubSpot API domain (
api.hubapi.com), which is a well-known and trusted service for this integration. - [SAFE]: The implementation avoids supply chain risks by using only Ruby's standard library components (json, net/http, uri, fileutils) rather than external gems.
- [SAFE]: Instructions for handling sensitive actions, such as creating or updating records, include requirements for explicit user confirmation, ensuring human-in-the-loop oversight.
Audit Metadata