Security audit
HubSpot
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed read-only HubSpot connector that uses OAuth credentials to search and retrieve CRM data through HubSpot's MCP server.
Install only if you want this environment to read HubSpot CRM data using the provided OAuth grant. Treat the stored refresh token and client secret as sensitive, avoid passing unrelated sensitive data as tool arguments, and revoke the HubSpot app access if the integration is no longer needed.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.