HubSpot
PassAudited by ClawScan on May 3, 2026.
Overview
This is a coherent HubSpot integration, but it relies on ClawLink OAuth access and can change business CRM or marketing data, so users should verify the provider and approve writes carefully.
Before installing, verify the ClawLink plugin and provider, connect only the HubSpot account you intend to use, grant the minimum permissions available, and carefully review any preview before approving writes, bulk changes, destructive actions, or public-facing marketing updates.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Approved tool calls could create or update business records or public-facing marketing assets in HubSpot.
The skill can execute HubSpot write operations through ClawLink tools, including CRM and marketing operations. The workflow includes preview and confirmation safeguards, making this purpose-aligned but still worth user attention.
For writes or anything marked as requiring confirmation, call `clawlink_preview_tool` first, then confirm with the user. Execute with `clawlink_call_tool`.
Review previews before approving writes, especially bulk, destructive, workflow, campaign, page, blog, or form changes.
The connected HubSpot account’s permissions determine what the agent may be able to read or change.
The skill requires delegated HubSpot account access via OAuth. This is expected for a HubSpot management skill, but it gives the integration permissions based on the connected account and granted scopes.
ClawLink's hosted page runs the HubSpot OAuth flow — the user clicks through the HubSpot login and grant screen.
Use the least-privileged HubSpot account or scopes available, and know how to revoke the ClawLink connection if needed.
The actual runtime behavior depends on the installed ClawLink plugin and live ClawLink tool catalog.
The skill depends on an external plugin that is not included in the provided artifact set. This is disclosed and central to the skill, but the plugin itself is outside this review.
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Install only the intended ClawHub ClawLink plugin and verify ClawLink using the provided verification/source links before connecting HubSpot.
HubSpot requests, responses, and credential-mediated operations may pass through ClawLink rather than connecting directly from the agent to HubSpot.
HubSpot access and tool execution are mediated through the external ClawLink service. This is clearly disclosed and purpose-aligned, but it means HubSpot data and delegated access depend on that provider boundary.
Powered by ClawLink ... an integration hub for OpenClaw that handles hosted connection flows and credentials
Review ClawLink’s documentation, privacy/security posture, and account permissions before pairing and connecting HubSpot.