hubspot-automation
Warn
Audited by Socket on Mar 31, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s capabilities match its stated HubSpot automation purpose, and the Rube endpoint appears to be an official Composio service. However, all authentication and CRM traffic are routed through a third-party MCP/intermediary instead of official HubSpot endpoints, creating medium risk around credential forwarding, data visibility, and externally hosted control of CRM actions.
Confidence: 86%Severity: 64%
Audit Metadata