deal-management

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill utilizes the official hubspot CLI tool, which is the standard interface for the vendor's services. All network operations are directed to HubSpot's infrastructure via this authenticated CLI.
  • [SAFE]: For all destructive operations (updates and creations), the skill implements a mandatory safety workflow consisting of a --dry-run to generate a preview, followed by a requirement to provide a --digest and --confirm value lifted from that preview. This prevents accidental or unauthorized mass modifications of CRM data.
  • [SAFE]: The skill uses jq for all data manipulation and variable extraction from JSONL outputs. This ensures that properties like contact names or deal stages are handled as structured data, reducing the risk of injection or malformed command construction during bulk processing.
  • [SAFE]: The use of /tmp/ for intermediate file storage is a standard local practice for complex CLI pipelines and does not involve exfiltration to untrusted external systems.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 11:16 PM