ClawHub

Native HubSpot

v1.0.1

Query and manage HubSpot CRM data via the HubSpot API. Use when you need to search or manage contacts, companies, deals, tickets, or pipelines. Supports crea...

⭐ 18· 689·2 current·2 all-time
by@codeninja23
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name and description state direct HubSpot API access and the package requires python3 plus a HUBSPOT_TOKEN — both are expected for a simple CLI tool that calls api.hubapi.com.
✓
Instruction Scope
SKILL.md instructs creating a HubSpot private app, setting HUBSPOT_TOKEN, and running the included Python script. The instructions do not ask the agent to read unrelated files or transmit data to other endpoints; they target only api.hubapi.com.
✓
Install Mechanism
No install spec (instruction-only) and the code uses only Python standard library; nothing is downloaded or written to disk outside the included script.
✓
Credentials
Only HUBSPOT_TOKEN is required and declared as the primary credential. That token is necessary for all described operations (read/write on CRM objects) and the scope list in the README matches the operations.
✓
Persistence & Privilege
The skill does not request always:true or any system-wide changes. It's user-invocable and does not claim persistent elevated privileges.
Assessment
This skill is coherent: it needs your HubSpot private-app token and uses python3 to call api.hubapi.com. Before installing, ensure you: (1) create a HubSpot private app with only the minimum scopes you need, (2) treat the HUBSPOT_TOKEN as a sensitive secret and only supply it to skills you trust, (3) review the full script locally (the provided listing was truncated in the prompt) to confirm there are no unexpected network calls or data exfiltration, and (4) consider using a token with limited write scopes or a token you can rotate if you're concerned.

Like a lobster shell, security has layers — review code before you run it.

latestvk975aq3hgs1dgcsq3jstd36s1d81rsd5

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binspython3
EnvHUBSPOT_TOKEN
Primary envHUBSPOT_TOKEN

Comments