deal-management
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes the official
hubspotCLI tool, which is the standard interface for the vendor's services. All network operations are directed to HubSpot's infrastructure via this authenticated CLI. - [SAFE]: For all destructive operations (updates and creations), the skill implements a mandatory safety workflow consisting of a
--dry-runto generate a preview, followed by a requirement to provide a--digestand--confirmvalue lifted from that preview. This prevents accidental or unauthorized mass modifications of CRM data. - [SAFE]: The skill uses
jqfor all data manipulation and variable extraction from JSONL outputs. This ensures that properties like contact names or deal stages are handled as structured data, reducing the risk of injection or malformed command construction during bulk processing. - [SAFE]: The use of
/tmp/for intermediate file storage is a standard local practice for complex CLI pipelines and does not involve exfiltration to untrusted external systems.
Audit Metadata