← 返回 Skills 市场
HubSpot
作者
Kevin Wall
· GitHub ↗
· v1.0.1
7748
总下载
6
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install hubspot
功能描述
HubSpot CRM and CMS API integration for contacts, companies, deals, owners, and content management.
安全使用建议
Install only if you intend to let an agent use a HubSpot private app token. Use a least-privilege token, prefer a sandbox or test records during setup, and explicitly confirm any create, update, owner assignment, or association change before running it against production data.
功能分析
Type: OpenClaw Skill
Name: hubspot
Version: 1.0.1
The skill bundle provides a legitimate integration with the HubSpot CRM and CMS API. All `curl` commands target the official `https://api.hubapi.com` domain and use the `HUBSPOT_ACCESS_TOKEN` as expected for authentication. There is no evidence of data exfiltration to unauthorized endpoints, malicious command execution, persistence mechanisms, obfuscation, or prompt injection attempts against the agent to subvert its intended behavior. The use of `curl` and `jq` is standard for API interaction, and while placeholders like `{contactId}` could present a shell injection vulnerability if the agent's execution environment does not properly sanitize user input, this is a platform-level vulnerability rather than malicious intent within the skill's content itself.
能力评估
Purpose & Capability
The documented curl and PowerShell examples match the stated purpose: interacting with HubSpot CRM/CMS APIs for contacts, companies, deals, owners, associations, properties, pages, domains, and files.
Instruction Scope
The skill clearly shows which examples create or update records, but it does not add prominent confirmation or sandbox guidance before live POST/PATCH operations.
Install Mechanism
The artifact is instruction-only markdown plus metadata; it contains no installer script, bundled executable, obfuscation, or automatic execution path.
Credentials
Requiring curl, jq, network access to api.hubapi.com, and HUBSPOT_ACCESS_TOKEN is proportionate for a HubSpot integration, but the token can expose or modify sensitive business records depending on its scopes.
Persistence & Privilege
No persistence, background worker, privilege escalation, local file indexing, credential harvesting, or non-HubSpot data flow appears in the artifacts.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install hubspot - 安装完成后，直接呼叫该 Skill 的名称或使用
/hubspot触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
Fix security flags: added homepage for provenance, declared curl/jq as required binaries, updated metadata format
v1.0.0
Initial release - HubSpot CRM and CMS API integration for contacts, companies, deals, owners, and content management.
元数据
常见问题
HubSpot 是什么？
HubSpot CRM and CMS API integration for contacts, companies, deals, owners, and content management. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 7748 次。
如何安装 HubSpot？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install hubspot」即可一键安装，无需额外配置。
HubSpot 是免费的吗？
是的，HubSpot 完全免费（开源免费），可自由下载、安装和使用。
HubSpot 支持哪些平台？
HubSpot 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 HubSpot？
由 Kevin Wall（@kwall1）开发并维护，当前版本 v1.0.1。
推荐 Skills