hubspot-automation

Warn

Audited by Socket on Mar 31, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s capabilities match its stated HubSpot automation purpose, and the Rube endpoint appears to be an official Composio service. However, all authentication and CRM traffic are routed through a third-party MCP/intermediary instead of official HubSpot endpoints, creating medium risk around credential forwarding, data visibility, and externally hosted control of CRM actions.

Confidence: 86%Severity: 64%
Audit Metadata
Analyzed At
Mar 31, 2026, 04:05 PM
Package URL
pkg:socket/skills-sh/sickn33%2Fantigravity-awesome-skills%2Fhubspot-automation%2F@5dd8c2a28ae38f277f77361309af4564f94dcff9