hubspot-create-deal
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The skill executes local Python scripts (create_deal.py and check_hubspot_config.py) to perform HubSpot CRM operations. This behavior is consistent with the skill's stated purpose.
- [DATA_EXFILTRATION] (SAFE): No unauthorized data exfiltration or access to sensitive system files was detected. Interaction with the HubSpot API is the primary function.
- [PROMPT_INJECTION] (LOW): The skill has a data ingestion surface through command-line arguments (--name, --amount, etc.). Evidence chain: Ingestion points: deal parameters in create_deal.py; Boundary markers: shell quotes are shown in usage examples; Capability inventory: executes local python scripts via bash; Sanitization: not explicitly specified in the markdown.
Audit Metadata