build-smart-lists
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the official HubSpot API (api.hubapi.com) for its intended purpose of managing CRM lists.
- [SAFE]: Sensitive credentials (HubSpot access tokens) are handled through environment variables, following standard security best practices for secret management.
- [SAFE]: The Python script uses well-known and reputable libraries (requests, python-dotenv) for network operations and configuration management.
- [SAFE]: File system operations are restricted to writing a local audit log, which is a benign administrative function.
- [SAFE]: No evidence of prompt injection, obfuscation, or remote code execution was found in the instructions or scripts.
Audit Metadata