hubspot-sequences
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses on marketing and sales automation workflows and does not contain any detected malicious instructions, injection patterns, or security vulnerabilities.
- [COMMAND_EXECUTION]: The skill includes a local utility
scripts/check-output.py. This script is designed to validate the structure and content of deliverables produced by the agent. It performs basic regex-based text analysis and does not utilize any dangerous system calls, network operations, or external dependencies. - [DATA_EXPOSURE]: No hardcoded secrets, API keys, or attempts to access sensitive system directories (e.g., SSH keys, environment variables) were found. The skill references HubSpot property names (like
lm_email_status) which are specific to the vendor's integration logic. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing user-provided sequence designs through a validation script. This process is documented with specific requirement checks and structural patterns. The capability inventory is low, restricted to reading local text files and performing string matching, which mitigates injection risks.
- [EXTERNAL_DOWNLOADS]: The skill does not perform any remote downloads or fetch external scripts at runtime. All references target local file paths or well-known CRM integration contexts.
Audit Metadata