hubspot-webhook-handlers
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill provides high-quality security guidance for webhook implementation.\n- [DATA_EXFILTRATION]: The skill correctly implements credential management by utilizing environment variables for sensitive secrets and limits network communication to official HubSpot API domains.\n- [INDIRECT_PROMPT_INJECTION]: The skill specifically addresses the risk of untrusted data by requiring HMAC-SHA256 signature verification to authenticate all incoming webhook payloads.\n- [REMOTE_CODE_EXECUTION]: The skill uses standard package registries and does not attempt to execute remote scripts or perform unsafe dynamic code evaluation.
Audit Metadata