Security audit

HubSpot CRM

Security checks for vulnerabilities and agentic risk

Overview

This HubSpot skill appears to do what it says, but it asks for broad CRM authority and can change or delete live records with limited safeguards.

Install only if you are comfortable giving this skill a HubSpot private-app token that can read and modify CRM data. Prefer a least-privilege token, remove unused scopes, test against non-production data first, and manually confirm any update or delete command before running it.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions

Findings (3)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:90
Finding: Unpinned Third-Party Dependency Installation
Content: View full analysis
Remediation: View remediation
--hash=sha256: ``` - Install with `python -m pip install --require-hashes -r requirements.txt`. - Recommend installation in an isolated virtual environment. - Use automated dependency scanning and controlled update processes to review new versions before deployment. ]]>

T09 · Insecure Skill Coding Practices

Note

Location: scripts/hubspot_crm.py:25
Finding: Outbound API Requests Lack Network Timeouts
Content: View full analysis
Remediation: View remediation

T05 · Unauthorized Access and Privilege Escalation

Warning

Location: SKILL.md:16
Finding: Documentation Requests HubSpot Scopes Not Used by the Implementation
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (29)

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 25)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 26)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 29)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 30)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 33)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 36)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 39)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 43)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 44)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 47)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 50)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 53)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 56)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 60)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 63)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 66)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 70)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 73)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 76)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 79)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 83)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 86)May include surrounding context.
md
python3 scripts/hubspot_crm.py contacts-list

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 95% confidence
Finding: The skill advertises and relies on environment-variable access and outbound network access to the HubSpot API, but it does not declare any explicit tool scope such as permissions or allowed-tools. That creates an authorization/visibility gap: an agent may be able to access secrets and perform live CRM operations without the user being clearly warned or the runtime being constrained.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The skill processes sensitive CRM data including contacts, emails, meeting notes, and sales activities, and sends that data to the HubSpot API, but it omits any privacy or data-handling warning. Users may unknowingly transmit personal or confidential business information to an external service without understanding retention, compliance, or access implications.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The skill exposes destructive operations such as deleting contacts and modifying deals, companies, and activities, but the description provides no explicit warning that these actions can permanently alter production CRM data. In agentic contexts, missing safety messaging increases the chance of accidental destructive execution by users or higher-level automations.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.