📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills hubspot-automation
📦
hubspot-automation
Content revision r2 Medium Risk ⚙️ External commands🌐 Network access
Automate HubSpot CRM Workflows
HubSpot work often requires careful schema discovery, deduplication, and pagination. This skill guides reliable CRM operations through Rube MCP and current Composio tool schemas.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "hubspot-automation" from https://skillstore.io/skills/sickn33-hubspot-automation.md and its manifest at https://skillstore.io/api/skills/sickn33-hubspot-automation/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "hubspot-automation". Find contacts matching the provided email list and report duplicates.
Expected outcome:
- Found 18 matching contacts across two pages.
- Two email addresses match multiple records and need review.
- No records were changed.
Using "hubspot-automation". Summarize open enterprise deals by pipeline stage and owner.
Expected outcome:
- Open enterprise deals span four active stages.
- Qualification has the highest record count.
- Three deals have no assigned owner.
Using "hubspot-automation". Check whether a customer tier property can be added to contacts.
Expected outcome:
- No property uses the proposed internal name.
- The selected property group exists.
- Three enumeration values are ready for approval.
Security Audit
Medium Riskv5 • 7/24/2026 Open versioned report
All 68 shell-backtick alerts and three reconnaissance alerts are false positives caused by Markdown identifiers and normal CRM duplicate searches. The Rube MCP endpoint is a confirmed network dependency. Third-party OAuth access and CRM mutations without explicit confirmation create medium contextual risks.
1
Files scanned
187
Lines analyzed
1
Review items
0
False positives ignored
Confirmed security concerns (2)
Medium
CRM Mutations Lack Explicit Confirmation
The skill directs agents to create or update CRM records and properties, including batches, without requiring a preview or user confirmation.
The cited workflows directly prescribe single and batch create or update operations. No approval checkpoint appears before these external mutations.
Medium
Third-Party OAuth and CRM Data Trust Boundary
HubSpot authorization and CRM operations rely on external Rube and Composio infrastructure, but the skill does not explain scopes or data handling.
The source names Composio, configures Rube MCP, and requires HubSpot OAuth. It provides no guidance about least-privilege scopes or CRM data processing.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Low
Hardcoded URL
**Get Rube MCP**: Add `https://rube.app/mcp` as an MCP server in your client configuration. No API k
The setup explicitly configures the third-party https://rube.app/mcp endpoint. This disclosed dependency creates a real external network and trust boundary.
Risk Factors
⚙️ External commands (50)
SKILL.md:16 SKILL.md:17 SKILL.md:21 SKILL.md:23 SKILL.md:24 SKILL.md:35 SKILL.md:36 SKILL.md:37 SKILL.md:38 SKILL.md:39 SKILL.md:42 SKILL.md:43 SKILL.md:44 SKILL.md:57 SKILL.md:58 SKILL.md:59 SKILL.md:60 SKILL.md:61 SKILL.md:64 SKILL.md:65 SKILL.md:77 SKILL.md:78 SKILL.md:79 SKILL.md:80 SKILL.md:81 SKILL.md:82 SKILL.md:85 SKILL.md:86 SKILL.md:89 SKILL.md:90 SKILL.md:91 SKILL.md:92 SKILL.md:99 SKILL.md:100 SKILL.md:101 SKILL.md:102 SKILL.md:105 SKILL.md:108 SKILL.md:110 SKILL.md:118 SKILL.md:119 SKILL.md:120 SKILL.md:121 SKILL.md:122 SKILL.md:125 SKILL.md:129 SKILL.md:135 SKILL.md:136 SKILL.md:138 SKILL.md:142
🌐 Network access (1)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-hubspot-automation/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-hubspot-automation?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-hubspot-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-hubspot-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-hubspot-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). hubspot-automation security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-hubspot-automation/audits/5BibTeX citation
@techreport{sickn33-sickn33-hubspot-automation-2026,
author = {sickn33},
title = {hubspot-automation security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-hubspot-automation/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "hubspot-automation security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-24"
url: "https://skillstore.io/skills/sickn33-hubspot-automation/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-hubspot-automation:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance
What You Can Build
Import Clean Contact Lists
Check email duplicates, validate properties, and prepare contact batches before creating records.
Review Deal Pipeline
Resolve pipeline stages and owners, then summarize filtered deals across every result page.
Investigate Support Tickets
Find tickets by status, date, or internal property while returning only requested fields.
Try These Prompts
Find Existing Contacts
Search HubSpot for contacts matching these email addresses. Return selected fields, duplicate candidates, and pagination status without changing any records.
Prepare Contact Import
Validate these contacts against HubSpot properties, identify duplicates, and prepare batches of 100. Show the plan before requesting confirmation.
Review Deal Pipeline
Map pipeline and stage identifiers, then summarize open deals by stage, owner, amount, and close date across every result page.
Plan Property Changes
Inspect existing properties and groups. Prepare new definitions, flag immutable-name conflicts, and request confirmation before any create or update action.
Best Practices
- Search current tool schemas and internal property names before every workflow.
- Verify the HubSpot account, preview changes, and obtain explicit approval before writes.
- Search for duplicates, limit batches to 100, paginate fully, and retain returned record identifiers.
Avoid
- Do not expose OAuth links, tokens, or unnecessary CRM data in prompts or logs.
- Do not use display labels where HubSpot requires internal property or stage identifiers.
- Do not run unreviewed bulk writes or property changes without a scoped preview.
Frequently Asked Questions
What setup does this skill require?
Configure Rube MCP, connect HubSpot through OAuth, and confirm the connection is active.
Can this skill modify HubSpot records?
Yes. It documents contact creation, company creation and updates, and custom property changes.
How does it reduce duplicate contacts?
It searches existing contacts before creation. Users should still review ambiguous matches before approving writes.
How are large result sets handled?
Searches follow cursor pagination. Create and update jobs are divided into batches of at most 100 records.
Can it delete CRM records or properties?
No deletion workflow is documented in this skill.
Why must tool schemas be searched first?
Rube tool schemas can change. Current schemas provide valid parameters and reduce failed HubSpot operations.
Developer Details
Author
sickn33License
MIT
Skillstore revision
r2
Version notice
The author did not declare a version.
Repository
https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/hubspot-automationRef
88a8e9a07f4c54ab105c1c41b6267c287146b07b
Maintenance freshness
7/26/2026
Usage
8 downloads · 116 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-fullstack
82Build Fullstack Apps with Senior Patterns
Teams need consistent setup, architecture, and review guidance for modern web applications. This skill provides scaffolders, workflow references, and quality prompts for React, Next.js, Node.js, GraphQL, and PostgreSQL projects.
Coding & Development View
📦
senior-architect
81Design Scalable Software Architectures
Architecture decisions are hard to compare across web, mobile, backend, and cloud systems. This skill provides structured guides and local scaffold scripts for reports, dependency review, and trade-off documentation.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
linear-projects-write
81Create and Update Linear Projects from the CLI
by Bind
Managing Linear projects through the web interface is slow when you work in the terminal or automate workflows. This skill lets you create and update projects with simple commands, so you can manage project data directly from scripts and the command line.
Productivity View
📦
gws-gmail-watch
80Monitor Gmail Messages with Pub/Sub
by googleworkspace
New Gmail messages are difficult to monitor continuously through manual checks. This skill streams incoming messages as NDJSON through Google Cloud Pub/Sub.
Productivity View
📦
lark-doc
87Manage Lark Docs and Feishu Wiki Content
by larksuite
Teams need reliable document updates without switching between tools. This skill guides Claude, Codex, and Claude Code through authenticated lark-cli workflows for Lark Docs.
Office & Reports View
📦
pptx
85Create PowerPoint Presentations with Python
by AutumnsGrove
Building polished PowerPoint decks by hand is slow and hard to repeat. This skill guides Claude, Codex, and Claude Code through PPTX creation, editing, and automation with python-pptx.
Office & Reports View
📦
building-agents
85Build Claude Code Agents
by C0ntr0lledCha0s
Creating reliable AI agents requires clear schemas, safe tools, and repeatable review steps. This skill guides agent design, validation, migration, and maintenance for Claude Code workflows.
Coding & Development View
📦
building-commands
84Build Claude Code Slash Commands
by C0ntr0lledCha0s
Teams need repeatable AI workflows that are easy to invoke and review. This skill helps create, update, validate, and document Claude Code slash commands.
Coding & Development View