hubspot-observability
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses
process.env.HUBSPOT_ACCESS_TOKENfor authentication, adhering to secure development practices for secret management by avoiding hardcoded credentials. - [SAFE]: The structured logging implementation using
pinoincludes specific redaction logic to ensure HubSpot access tokens are removed from data objects before they are written to logs. - [SAFE]: The skill provides instructions for monitoring and metrics collection that interact with the official HubSpot API domain (
api.hubapi.com), which is consistent with its stated purpose of observability. - [SAFE]: The suggested dependencies are well-known, established libraries in the Node.js ecosystem (e.g.,
prom-client,pino,express).
Audit Metadata