ClawHub

Hubspot Crm

v1.0.0

Full HubSpot CRM automation — contacts, deals, companies, activities, and pipeline reports via the HubSpot API.

⭐ 0· 85·0 current·0 all-time
by@fr3kstyle·duplicate of @fr3kstyle/hubspot-crm-skill
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The name/description, SKILL.md, and the included Python CLI implement HubSpot CRM operations (contacts, deals, companies, activities, reports) against api.hubapi.com. The requested functionality aligns with the stated purpose.
✓
Instruction Scope
SKILL.md instructs only to set a HUBSPOT_API_KEY and run the provided Python script. The script only calls HubSpot API endpoints and prints results; it does not reference other system files, other environment variables, or external endpoints beyond api.hubapi.com.
✓
Install Mechanism
No install spec is provided (instruction-only plus an included Python script). It requires Python and the requests library, which is proportionate for a CLI script. Nothing is downloaded or extracted by the skill itself.
!
Credentials
The SKILL.md and script require a HUBSPOT_API_KEY (a private-app Bearer token) and list required HubSpot scopes, which is appropriate. However, the registry metadata incorrectly lists 'Required env vars: none' and 'Primary credential: none' — an incoherence that could lead users to miss the need to provide the token. The skill only needs that one token; no unrelated credentials are requested.
✓
Persistence & Privilege
The skill is not marked always:true and does not persist or modify other skills or system-wide settings. It runs as a one-off CLI tool using the environment token.
Assessment
This skill appears to do what it says: a simple CLI that uses a HubSpot private-app Bearer token to manage CRM data. Before installing or running it, verify these points: (1) the registry metadata omitted the required HUBSPOT_API_KEY — you must set that env var; (2) only provide a HubSpot token with the minimal scopes needed (avoid broad admin tokens); (3) review the included scripts/hubspot_crm.py yourself to confirm there are no modifications you dislike; (4) run it from a safe or disposable environment (or with a test HubSpot account) until you trust it; and (5) because the skill source/homepage is unknown, prefer obtaining code from an official or verified source when possible and rotate/revoke tokens after testing.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ew1eg05901f4pctyt706jp183b7fa

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments