hubspot-app-builder
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @hubspot/cli package globally via npm. This is a standard requirement for HubSpot development and is considered a safe operation within the context of the platform's official tooling.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for building UI extensions that ingest CRM data and interact with external APIs, which represents a potential surface for indirect prompt injection.\n
- Ingestion points: Data enters the system via the useCrmProperties hook in UI components (e.g., src/app/cards/ContactEnrichment.jsx) and through webhook payloads.\n
- Boundary markers: The skill documentation (references/signature-validation.md) explicitly instructs developers to validate the X-HubSpot-Signature-v3 header to ensure that incoming requests are authentic and originate from HubSpot.\n
- Capability inventory: The skill utilizes hubspot.fetch for network communication and the HubSpot CLI for project management and secret configuration.\n
- Sanitization: Comprehensive guidance is provided for implementing signature validation using the @hubspot/api-client, which serves as a critical trust boundary for the application logic.
Audit Metadata