fix-lifecycle-stages
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill utilizes a HubSpot private app access token for authentication. It follows secure practices by instructing users to store this sensitive credential in an
.envfile, preventing accidental exposure in the source code. - [EXTERNAL_DOWNLOADS]: The included Python scripts perform network requests to HubSpot's official API (
api.hubapi.com). These connections are necessary for the skill's functionality and are restricted to retrieving and updating record metadata within the user's own HubSpot instance. - [INDIRECT_PROMPT_INJECTION]: The skill processes data retrieved from external HubSpot records.
- Ingestion points: Record IDs and lifecycle stage properties are fetched via the HubSpot Search API in
before.py,execute.py, andafter.py. - Boundary markers: The scripts process data as structured JSON objects from API responses.
- Capability inventory: The skill is capable of performing HTTP POST and PATCH requests to HubSpot and writing local audit logs to the
data/audit-logs/directory. - Sanitization: Data ingestion is limited to identifying records for batch updates using hardcoded stage values (e.g., "lead"), and the retrieved data is not interpolated into natural language prompts or executable commands.
Audit Metadata