hubspot-app-builder
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: Recommends installing official HubSpot development packages including @hubspot/cli and @hubspot/api-client via NPM. These are recognized tools from a well-known technology provider.
- [SAFE]: The skill advocates for OAuth 2.0 as the sole authentication method for public apps, which follows security best practices for public integrations.
- [SAFE]: Provides extensive documentation on implementing X-HubSpot-Signature-v3 validation for backend endpoints, ensuring that only authentic requests from HubSpot are processed.
- [SAFE]: Network operations via hubspot.fetch() require pre-configured permittedUrls in the application metadata, maintaining a secure and restricted communication boundary.
Audit Metadata