badgebot

• Analyzed: Apr 1, 2026, 7:26 PM
• Findings: 1
• Version: 1.0.0
• Hash: a8f3d6f610a9cbe983a2807eb9d1e7f8ec178a35bc1324b453665fc87c2300c5
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'slack-lead-scanner' skill in SKILL.md automates lead enrichment and CRM synchronization by monitoring Slack messages and updating HubSpot. It is classified as suspicious because it requires access to multiple sensitive API tokens (Slack, Apollo, HubSpot) stored in the filesystem and performs automated PATCH operations on a HubSpot CRM based on natural language interpretation of Slack DM replies. This pattern introduces a risk of unintended or unauthorized data modification in the HubSpot portal (ID: 43856876) if the agent misinterprets user input or if the Slack communication channel is compromised.