hubspot-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DATA_EXFILTRATION]: The skill accesses sensitive local files, including
.envand application logs (logs/app.log), to package them into a diagnostic archive. Although the instructions providesedcommands to redact common HubSpot token patterns and email addresses, automated regex-based redaction is often incomplete and may fail to mask other forms of PII or non-standard credentials. - [COMMAND_EXECUTION]: The skill utilizes several shell commands via
Bash, includingcurlfor API interactions,sedandgrepfor data processing/redaction, andtarfor creating the final diagnostic bundle. - [EXTERNAL_DOWNLOADS]: The skill performs network requests to
api.hubapi.comandstatus.hubspot.com. These operations are used to verify API connectivity, check token scopes, and retrieve service status, which align with the skill's stated diagnostic purpose.
Audit Metadata