review-bounced-contacts
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_SAFE]: The skill correctly instructs the user to store the HubSpot private app access token in a .env file rather than hardcoding it in the script.
- [COMMAND_EXECUTION]: Provides a Python script snippet using the requests library to search and retrieve contact records from the HubSpot CRM.
- [EXTERNAL_DOWNLOADS]: Fetches configuration and data from HubSpot's official API (api.hubapi.com), which is a well-known and trusted service.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests contact data (names, emails, company info) from the HubSpot API. While it lacks explicit sanitization or boundary markers, the capabilities (deletion) are part of the intended manual review process, and the surface is inherent to the skill's primary function.
Audit Metadata