hubspot-warehouse-sync
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements robust security best practices for data engineering, including instructions for using secret managers rather than hardcoding credentials.
- [EXTERNAL_DOWNLOADS]: Dependencies listed (requests, pandas, pyarrow, google-cloud-bigquery, snowflake-connector-python, psycopg2-binary) are standard, well-known libraries from official package registries.
- [COMMAND_EXECUTION]: Shell commands are restricted to benign data inspection tasks (curl, jq, grep) targeting the official HubSpot API endpoints.
- [REMOTE_CODE_EXECUTION]: No patterns of remote script execution or dynamic code evaluation from untrusted sources were detected. Code generation is limited to standard SQL DDL (ALTER TABLE) based on API schema metadata.
- [DATA_EXFILTRATION]: All network operations are directed at official HubSpot API domains (
api.hubapi.com) or target data warehouse services as intended by the skill's primary purpose. No sensitive local data access (e.g., SSH keys, AWS credentials) was found.
Audit Metadata