Native HubSpot

Query and manage HubSpot CRM data via the HubSpot API. Use when you need to search or manage contacts, companies, deals, tickets, or pipelines. Supports crea...

Security Scan

The skill's requests, instructions, and bundled script align with its stated purpose of calling HubSpot's API using a private app token; nothing in the package appears disproportionate or unrelated to that goal.

Purpose & Capability

Name and description state direct HubSpot API access and the package requires python3 plus a HUBSPOT_TOKEN — both are expected for a simple CLI tool that calls api.hubapi.com.

Instruction Scope

SKILL.md instructs creating a HubSpot private app, setting HUBSPOT_TOKEN, and running the included Python script. The instructions do not ask the agent to read unrelated files or transmit data to other endpoints; they target only api.hubapi.com.

Install Mechanism

No install spec (instruction-only) and the code uses only Python standard library; nothing is downloaded or written to disk outside the included script.

Credentials

Only HUBSPOT_TOKEN is required and declared as the primary credential. That token is necessary for all described operations (read/write on CRM objects) and the scope list in the README matches the operations.

Persistence & Privilege

The skill does not request always:true or any system-wide changes. It's user-invocable and does not claim persistent elevated privileges.

Assessment

This skill is coherent: it needs your HubSpot private-app token and uses python3 to call api.hubapi.com. Before installing, ensure you: (1) create a HubSpot private app with only the minimum scopes you need, (2) treat the HUBSPOT_TOKEN as a sensitive secret and only supply it to skills you trust, (3) review the full script locally (the provided listing was truncated in the prompt) to confirm there are no unexpected network calls or data exfiltration, and (4) consider using a token with limited write scopes or a token you can rotate if you're concerned.

HubSpot

Interact with HubSpot CRM directly via the HubSpot API (api.hubapi.com).

Setup (one-time)

1. In HubSpot: Settings → Integrations → Private Apps → Create a private app
2. Give it scopes: crm.objects.contacts.read, crm.objects.contacts.write, crm.objects.companies.read, crm.objects.companies.write, crm.objects.deals.read, crm.objects.deals.write, tickets
3. Copy the access token
4. Set environment variable:

   HUBSPOT_TOKEN=pat-na1-...
   

Queries

Search contacts

python3 /mnt/skills/user/hubspot/scripts/hubspot_query.py search contacts --query "john"
python3 /mnt/skills/user/hubspot/scripts/hubspot_query.py search contacts --email "[e-mail]"

List contacts

python3 /mnt/skills/user/hubspot/scripts/hubspot_query.py list contacts --limit 20

Get a specific object

python3 /mnt/skills/user/hubspot/scripts/hubspot_query.py get contacts 12345
python3 /mnt/skills/user/hubspot/scripts/hubspot_query.py get companies 67890
python3 /mnt/skills/user/hubspot/scripts/hubspot_query.py get deals 11111

List companies

python3 /mnt/skills/user/hubspot/scripts/hubspot_query.py list companies --limit 20

Search companies

python3 /mnt/skills/user/hubspot/scripts/hubspot_query.py search companies --query "Acme"

List deals

python3 /mnt/skills/user/hubspot/scripts/hubspot_query.py list deals --limit 20

Search deals

python3 /mnt/skills/user/hubspot/scripts/hubspot_query.py search deals --query "enterprise"

List tickets

python3 /mnt/skills/user/hubspot/scripts/hubspot_query.py list tickets --limit 20

Create a contact

python3 /mnt/skills/user/hubspot/scripts/hubspot_query.py create contacts --email "[e-mail]" --firstname "Jane" --lastname "Doe"

Create a company

python3 /mnt/skills/user/hubspot/scripts/hubspot_query.py create companies --name "Acme Corp" --domain "acme.com"

Create a deal

python3 /mnt/skills/user/hubspot/scripts/hubspot_query.py create deals --dealname "Enterprise Plan" --amount 50000 --pipeline default --dealstage appointmentscheduled

Update an object

python3 /mnt/skills/user/hubspot/scripts/hubspot_query.py update contacts 12345 --email "[e-mail]" --phone "[phone]"
python3 /mnt/skills/user/hubspot/scripts/hubspot_query.py update deals 11111 --dealstage closedwon --amount 75000

Associate objects

python3 /mnt/skills/user/hubspot/scripts/hubspot_query.py associate contacts 12345 companies 67890

List pipelines

python3 /mnt/skills/user/hubspot/scripts/hubspot_query.py pipelines deals
python3 /mnt/skills/user/hubspot/scripts/hubspot_query.py pipelines tickets

List owners

python3 /mnt/skills/user/hubspot/scripts/hubspot_query.py owners