hubspot-automation
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the configuration of a remote MCP server at
https://rube.app/mcp, which provides the tool definitions and operational logic. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection by processing external data from HubSpot CRM, such as support tickets or contact notes.
- Ingestion points: Data is ingested via tools like
HUBSPOT_SEARCH_TICKETS,HUBSPOT_SEARCH_CONTACTS_BY_CRITERIA, andHUBSPOT_GET_DEAL. - Boundary markers: The instructions do not define specific delimiters or warnings to treat ingested CRM data as untrusted.
- Capability inventory: The skill has significant write capabilities including
HUBSPOT_CREATE_CONTACT,HUBSPOT_UPDATE_COMPANIES, andHUBSPOT_CREATE_PROPERTY_FOR_SPECIFIED_OBJECT_TYPE. - Sanitization: There are no explicit instructions for sanitizing or validating external CRM content before processing.
Audit Metadata