← Back to Skills Marketplace
HubSpot
by
Kevin Wall
· GitHub ↗
· v1.0.1
7748
Downloads
6
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install hubspot
Description
HubSpot CRM and CMS API integration for contacts, companies, deals, owners, and content management.
Usage Guidance
Install only if you intend to let an agent use a HubSpot private app token. Use a least-privilege token, prefer a sandbox or test records during setup, and explicitly confirm any create, update, owner assignment, or association change before running it against production data.
Capability Analysis
Type: OpenClaw Skill
Name: hubspot
Version: 1.0.1
The skill bundle provides a legitimate integration with the HubSpot CRM and CMS API. All `curl` commands target the official `https://api.hubapi.com` domain and use the `HUBSPOT_ACCESS_TOKEN` as expected for authentication. There is no evidence of data exfiltration to unauthorized endpoints, malicious command execution, persistence mechanisms, obfuscation, or prompt injection attempts against the agent to subvert its intended behavior. The use of `curl` and `jq` is standard for API interaction, and while placeholders like `{contactId}` could present a shell injection vulnerability if the agent's execution environment does not properly sanitize user input, this is a platform-level vulnerability rather than malicious intent within the skill's content itself.
Capability Assessment
Purpose & Capability
The documented curl and PowerShell examples match the stated purpose: interacting with HubSpot CRM/CMS APIs for contacts, companies, deals, owners, associations, properties, pages, domains, and files.
Instruction Scope
The skill clearly shows which examples create or update records, but it does not add prominent confirmation or sandbox guidance before live POST/PATCH operations.
Install Mechanism
The artifact is instruction-only markdown plus metadata; it contains no installer script, bundled executable, obfuscation, or automatic execution path.
Credentials
Requiring curl, jq, network access to api.hubapi.com, and HUBSPOT_ACCESS_TOKEN is proportionate for a HubSpot integration, but the token can expose or modify sensitive business records depending on its scopes.
Persistence & Privilege
No persistence, background worker, privilege escalation, local file indexing, credential harvesting, or non-HubSpot data flow appears in the artifacts.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install hubspot - After installation, invoke the skill by name or use
/hubspot - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Fix security flags: added homepage for provenance, declared curl/jq as required binaries, updated metadata format
v1.0.0
Initial release - HubSpot CRM and CMS API integration for contacts, companies, deals, owners, and content management.
Metadata
Frequently Asked Questions
What is HubSpot?
HubSpot CRM and CMS API integration for contacts, companies, deals, owners, and content management. It is an AI Agent Skill for Claude Code / OpenClaw, with 7748 downloads so far.
How do I install HubSpot?
Run "/install hubspot" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is HubSpot free?
Yes, HubSpot is completely free (open-source). You can download, install and use it at no cost.
Which platforms does HubSpot support?
HubSpot is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created HubSpot?
It is built and maintained by Kevin Wall (@kwall1); the current version is v1.0.1.
More Skills