merge-duplicate-companies
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the HubSpot API exclusively for data retrieval and analysis. It does not perform any automated write or delete operations, ensuring data integrity.
- [SAFE]: Authentication credentials (HUBSPOT_ACCESS_TOKEN) are correctly handled through a .env file, following security best practices for secret management.
- [SAFE]: All network requests are directed to the official HubSpot API domain (api.hubapi.com), which is a well-known service.
- [SAFE]: The skill includes strong human-in-the-loop safeguards by requiring manual verification and execution through the HubSpot UI or third-party tools for irreversible merge operations.
- [SAFE]: Analysis of the Python code confirms no usage of dangerous functions like eval(), exec(), or arbitrary subprocess execution.
Audit Metadata