workflows-as-code
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a standard HubSpot private app access token for authentication, which is expected for interacting with HubSpot APIs. It follows best practices by instructing the user to store the token in a
.envfile. - [SAFE]: Network operations are limited to the official HubSpot API domain (
api.hubapi.com) to fetch and create workflow definitions. These actions are directly related to the skill's primary purpose of backup and restoration. - [SAFE]: File system operations are restricted to a local
data/workflow-exports/directory for storing JSON exports and manifest files. The skill correctly notes that these files may contain sensitive business logic and recommends keeping them in private repositories. - [SAFE]: The restoration process includes a manual confirmation step ('Type RESTORE') and ensures that restored workflows are created in a disabled state with a suffix, preventing accidental disruption of active automations.
- [SAFE]: All dependencies (
requests,python-dotenv) are standard, well-known libraries used for HTTP requests and environment variable management.
Audit Metadata