hubspot-deal-pipeline-automation

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes data from external HubSpot API endpoints (deals, properties, associations), which constitutes a surface for indirect prompt injection if the source data is compromised.
  • Ingestion points: Data is fetched from HubSpot CRM Search and Objects APIs in SKILL.md and references/implementation-guide.md (via urllib.request).
  • Boundary markers: Absent; there are no specific delimiters or instructions to ignore embedded content within the ingested API data.
  • Capability inventory: The skill uses Bash(curl), Bash(python3), and the Write tool to interact with the environment and remote APIs.
  • Sanitization: No explicit sanitization or filtering of external content is implemented in the provided scripts.
  • [EXTERNAL_DOWNLOADS]: The skill performs network operations to fetch deal and pipeline information from HubSpot's official API (api.hubapi.com), a well-known service provider.
  • [COMMAND_EXECUTION]: Utilizes system utilities including curl for API requests and jq for JSON processing within shell environments described in SKILL.md.
  • [DYNAMIC_EXECUTION]: Uses python3 -c for inline execution of Python code to perform date calculations and generate epoch timestamps for API query filters.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:44 AM
Security Audit — agent-trust-hub — hubspot-deal-pipeline-automation