bulk-operations
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements best practices for bulk data management within the HubSpot ecosystem. Key security and safety features observed include:\n
- A mandatory two-step dry-run and confirmation workflow for all destructive operations (delete, update, merge, upsert), which requires a server-generated digest and explicit confirmation value.\n
- Usage of standard command-line tools like
jqfor data transformation andbashfor pagination logic.\n - Guidance on rate-limit hygiene and audit logging through
hubspot history.\n - Proper handling of authentication types (OAuth vs Service Keys) for sensitive operations like GDPR purges.\n- [REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. The scripts provided are local helper tools for pagination and data processing.\n- [DATA_EXFILTRATION]: No data exfiltration patterns were detected. Network operations are restricted to the HubSpot CLI's interaction with its official API.\n- [CREDENTIALS_UNSAFE]: No hardcoded credentials or unsafe secret handling patterns were detected. The skill correctly references environment variables like
HUBSPOT_ACCESS_TOKENfor service key operations.
Audit Metadata