crm-lookup
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from HubSpot CRM records, including contact information, company details, and deal names, which are ingested via the
hubspot objects getandhubspot objects searchcommands. - Ingestion points: Data is pulled from the HubSpot CRM API via the
hubspotCLI (SKILL.md). - Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the skill definition.
- Capability inventory: The skill utilizes the
hubspotCLI for reading data andjqfor client-side filtering. - Sanitization: No explicit sanitization or escaping of CRM field values is performed before the data is processed by the agent.
Audit Metadata