ClawHub
Back to skill

Security audit

Hubspot for Shopify via Agiexa

Security checks for vulnerabilities and agentic risk

Overview

This skill provides a prelaunch HubSpot integration preview and an optional waitlist signup that requires your explicit permission.

Install this for information about a planned integration, not immediate HubSpot operations. Optional waitlist signup shares your confirmed email, role and any optional details with Agiexa. Review permissions separately before connecting the future integration; this package does not establish that service's security claims.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (7)

Description-Behavior Mismatch

High
Category
MCP Tool Poisoning
Confidence
99% confidence
Finding

The code's primary function is waitlist signup rather than the advertised HubSpot–Shopify integration. Although the destination is the named provider, submitting registration information and a consent assertion is materially different from looking up or updating CRM records. The payload uses fixed example values, so this chunk does not demonstrate collection or exfiltration of actual user data.

Content

No source excerpt is available for this finding.

Credential Access

High
Category
Privilege Escalation
Confidence
70% confidence
Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · references/tools.md (reported line 162)May include surrounding context.

md
ieves a paginated list of HubSpot emails, allowing selection of specific properties (with or without history), associated object IDs, and filterin |
| `HUBSPOT_LIST_EVENT_TEMPLATES` | Retrieves all event templates associated with a valid `appId` for an existing application in HubSpot's CRM Timeline |
| `HUBSPOT_LIST_FEEDBACK_SUBMISSIONS` | Retrieves a paginated list of feedback submissions from HubSpot, allowing specification of properties (including history), associated object IDs, and |
| `HUBSPOT_LIST_GRANTED_SCOPES` | Tool to introspect the current OAuth access token and return its granted scopes and metadata |
| `HUBSPOT_LIST_OBJECT_ASSOCIATIONS` | List all associations from a single CRM record to a specified target object type |
| `HUBSPOT_LIST_PRODUCTS` | Retrieves a paginated list of HubSpot products |
| `HUBSPOT_LIST_QUOTES` | Retrieves a paginated list of quotes, allowing selection of specific properties, property history, associated object IDs, and filtering by archived st |

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 9)May include surrounding context.

md
openclaw:
    requires:
      bins:
        - curl
    homepage: https://agiexa.com/integrations/hubspot
---

The manifest advertises operational HubSpot capabilities, but the skill redirects task requests to a prelaunch waitlist.

Medium
Category
Excessive Agency
Confidence
98% confidence
Finding

The manifest at L003 describes connecting HubSpot to Shopify and looking up or updating CRM records. However, L070 instructs the agent to defer requests for those tasks until launch, and the supplied executable workflow at L090–L100 instead posts user contact details to an Agiexa waitlist. This materially differs from the operational integration described in the manifest, although the waitlist submission explicitly requires consent.

Content

No source excerpt is available for this finding.

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · references/use-cases.md (reported line 32)May include surrounding context.

md
- Apps: HubSpot
- Tools: `HUBSPOT_GET_DEAL`, `HUBSPOT_LIST_DEAL_ACTIVITIES`, `HUBSPOT_UPDATE_DEAL`

> Help me monitor HubSpot deal-stage changes. When a deal changes stage, retrieve its relevant properties, associated contact and company records, and recent activities where available. Determine which next steps are appropriate for the new stage based on my existing sales process. For example, a proposal-stage deal may need a quotation follow-up, while a negotiation-stage deal may need clarification of requirements. Identify missing information and prepare a task or follow-up draft when appropriate. Do not assume a deal is won or lost beyond its recorded stage, and do not send emails or change deal properties without approval.

## Prepare Personalized Sales Follow-Ups

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · references/use-cases.md (reported line 68)May include surrounding context.

md
- Apps: HubSpot, Shopify, Google Ads
- Tools: `HUBSPOT_GET_CAMPAIGNS`, `HUBSPOT_GET_CAMPAIGN_METRICS`, `HUBSPOT_FETCH_REVENUE`

> Analyze my HubSpot marketing campaigns for the selected date range. Retrieve available campaign metrics, associated assets, email performance statistics, and revenue attribution information. Identify campaigns generating engagement, creating relevant contact activity, or contributing to associated deals where supported. Compare performance using clearly defined metrics and the available attribution model. If Shopify orders or Google Ads results are available through connected integrations, compare them only when the data can be matched reliably. Highlight underperforming campaigns and promising opportunities without assuming that correlation proves causation. Present the findings in tables and recommend the next steps. Do not publish emails or change live campaigns without approval.

## Automate Sales Tasks and Reminders

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · references/use-cases.md (reported line 86)May include surrounding context.

md
- Apps: HubSpot
- Tools: `HUBSPOT_RETRIEVE_ALL_PIPELINES_FOR_SPECIFIED_OBJECT_TYPE`, `HUBSPOT_RETRIEVE_PIPELINE_STAGES`, `HUBSPOT_AUDIT_PIPELINE_CHANGES`

> Review my HubSpot deal pipelines, stages, stage properties, and available pipeline change history. Identify stages with unclear progression criteria, deals missing important fields, and records that may be stalled or incorrectly categorized. Summarize the number and total value of deals in each stage where the required data is available. Recommend clearer stage definitions, required information, and next-step criteria. Distinguish observed pipeline data from suggestions for process improvement. Do not replace pipelines, delete stages, or change existing stage definitions without approval. Present a concise pipeline audit and a prioritized improvement plan.

## Generate a Weekly CRM Performance Report