hubspot-automation
Warn
Audited by Socket on Apr 27, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's HubSpot capabilities match its stated purpose, and the publisher relationship between Rube and Composio appears verifiable. The main concern is architectural: all CRM data and actions are mediated by a hosted third-party MCP endpoint, creating intermediary trust, mutable service behavior, and write-action risk despite otherwise coherent scope.
Confidence: 84%Severity: 56%
Audit Metadata