← 返回 Skills 市场
HubSpot
作者
Kevin Wall
· GitHub ↗
· v1.0.1
7974
总下载
6
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install hubspot
功能描述
HubSpot CRM and CMS API integration for contacts, companies, deals, owners, and content management.
安全使用建议
Review this before installing if the agent may operate against a production HubSpot portal. Use a minimally scoped private app token, keep it out of files and shared logs, prefer a test portal for examples, and require explicit approval before running POST or PATCH commands that create or modify CRM records.
功能分析
Type: OpenClaw Skill
Name: hubspot
Version: 1.0.1
The skill bundle provides a legitimate integration with the HubSpot CRM and CMS API. All `curl` commands target the official `https://api.hubapi.com` domain and use the `HUBSPOT_ACCESS_TOKEN` as expected for authentication. There is no evidence of data exfiltration to unauthorized endpoints, malicious command execution, persistence mechanisms, obfuscation, or prompt injection attempts against the agent to subvert its intended behavior. The use of `curl` and `jq` is standard for API interaction, and while placeholders like `{contactId}` could present a shell injection vulnerability if the agent's execution environment does not properly sanitize user input, this is a platform-level vulnerability rather than malicious intent within the skill's content itself.
能力评估
Credentials
Using curl, jq, network access to api.hubapi.com, and HUBSPOT_ACCESS_TOKEN is proportionate for a HubSpot API skill, but the token may carry broad CRM/CMS permissions depending on how the user scopes it.
Install Mechanism
No installer, dependency download, executable script, or remote payload retrieval is present. The skill is a Markdown instruction file requiring curl, jq, and a HubSpot token.
Instruction Scope
The instructions include POST and PATCH examples for creating contacts and deals, updating contact properties, assigning owners, and creating associations, but do not clearly warn that these change live HubSpot data or require explicit confirmation before mutation.
Persistence & Privilege
No system persistence or local privilege escalation is present, but the skill relies on a high-value HubSpot private app access token and gives only a bare environment-variable example without secret handling, least-privilege, rotation, or logging cautions.
Purpose & Capability
The declared purpose is HubSpot CRM and CMS integration, and the commands target HubSpot API endpoints for contacts, companies, deals, owners, associations, CMS pages, domains, and files. Those capabilities fit the purpose, but include sensitive CRM data access and live mutations.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install hubspot - 安装完成后，直接呼叫该 Skill 的名称或使用
/hubspot触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
Fix security flags: added homepage for provenance, declared curl/jq as required binaries, updated metadata format
v1.0.0
Initial release - HubSpot CRM and CMS API integration for contacts, companies, deals, owners, and content management.
元数据
常见问题
HubSpot 是什么？
HubSpot CRM and CMS API integration for contacts, companies, deals, owners, and content management. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 7974 次。
如何安装 HubSpot？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install hubspot」即可一键安装，无需额外配置。
HubSpot 是免费的吗？
是的，HubSpot 完全免费（开源免费），可自由下载、安装和使用。
HubSpot 支持哪些平台？
HubSpot 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 HubSpot？
由 Kevin Wall（@kwall1）开发并维护，当前版本 v1.0.1。
推荐 Skills