hubspot-enrichment-scoring
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx @vibeprospecting/vpai@latestto execute the vendor's CLI tool. These downloads and executions originate from a recognized vendor service associated with the skill's purpose. - [COMMAND_EXECUTION]: The skill executes various shell commands and Python scripts to interact with the HubSpot API and the Vibe Prospecting CLI. These operations are transparent, purpose-built for CRM management, and follow standard practices for such integrations.
- [DATA_EXFILTRATION]: The skill exports HubSpot company data and sends it to Vibe Prospecting for enrichment. While this involves moving data to an external service, it is the primary stated purpose of the skill and occurs via established vendor channels. The HubSpot token is handled using session environment variables to prevent accidental persistence.
Audit Metadata