crm-lookup

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from HubSpot CRM records, including contact information, company details, and deal names, which are ingested via the hubspot objects get and hubspot objects search commands.
  • Ingestion points: Data is pulled from the HubSpot CRM API via the hubspot CLI (SKILL.md).
  • Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the skill definition.
  • Capability inventory: The skill utilizes the hubspot CLI for reading data and jq for client-side filtering.
  • Sanitization: No explicit sanitization or escaping of CRM field values is performed before the data is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 03:48 AM