hubspot

Integrates with HubSpot CRM API for managing contacts, companies, and deals using OAuth authentication.

Install this skill

64/100

Security score

The hubspot skill was audited on Feb 11, 2026 and we found 32 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 459

Template literal with variable interpolation in command context

SourceSKILL.md

459	'Authorization': `Bearer ${process.env.MATON_API_KEY}`

low line 455

Fetch to external URL

SourceSKILL.md

455	const response = await fetch('https://gateway.maton.ai/hubspot/crm/v3/objects/contacts', {

low line 459

Access to .env file

SourceSKILL.md

459	'Authorization': `Bearer ${process.env.MATON_API_KEY}`

low line 4

External URL reference

SourceSKILL.md

4	HubSpot CRM API integration with managed OAuth. Manage contacts, companies, deals, and associations. Use this skill when users want to create or update CRM records, search contacts, or sync data with

low line 26

External URL reference

SourceSKILL.md

26	req = urllib.request.Request('https://gateway.maton.ai/hubspot/crm/v3/objects/contacts?limit=10&properties=email,firstname,lastname')

low line 35

External URL reference

SourceSKILL.md

35	https://gateway.maton.ai/hubspot/{native-api-path}

low line 56

External URL reference

SourceSKILL.md

56	1. Sign in or create an account at [maton.ai](https://maton.ai)

low line 57

External URL reference

SourceSKILL.md

57	2. Go to [maton.ai/settings](https://maton.ai/settings)

low line 62

External URL reference

SourceSKILL.md

62	Manage your HubSpot OAuth connections at `https://ctrl.maton.ai`.

low line 69

External URL reference

SourceSKILL.md

69	req = urllib.request.Request('https://ctrl.maton.ai/connections?app=hubspot&status=ACTIVE')

low line 81

External URL reference

SourceSKILL.md

81	req = urllib.request.Request('https://ctrl.maton.ai/connections', data=data, method='POST')

low line 93

External URL reference

SourceSKILL.md

93	req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}')

low line 107

External URL reference

SourceSKILL.md

107	"url": "https://connect.maton.ai/?session_token=...",

low line 121

External URL reference

SourceSKILL.md

121	req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}', method='DELETE')

low line 134

External URL reference

SourceSKILL.md

134	req = urllib.request.Request('https://gateway.maton.ai/hubspot/crm/v3/objects/contacts')

low line 455

External URL reference

SourceSKILL.md

455	const response = await fetch('https://gateway.maton.ai/hubspot/crm/v3/objects/contacts', {

low line 474

External URL reference

SourceSKILL.md

474	'https://gateway.maton.ai/hubspot/crm/v3/objects/contacts',

low line 511

External URL reference

SourceSKILL.md

511	req = urllib.request.Request('https://ctrl.maton.ai/connections')

low line 521

External URL reference

SourceSKILL.md

521	- Correct: `https://gateway.maton.ai/hubspot/crm/v3/objects/contacts`

low line 522

External URL reference

SourceSKILL.md

522	- Incorrect: `https://gateway.maton.ai/crm/v3/objects/contacts`

low line 526

External URL reference

SourceSKILL.md

526	- [HubSpot API Overview](https://developers.hubspot.com/docs/api/overview)

low line 527

External URL reference

SourceSKILL.md

527	- [List Contacts](https://developers.hubspot.com/docs/api-reference/crm-contacts-v3/basic/get-crm-v3-objects-contacts.md)

low line 528

External URL reference

SourceSKILL.md

528	- [Create Contact](https://developers.hubspot.com/docs/api-reference/crm-contacts-v3/basic/post-crm-v3-objects-contacts.md)

low line 529

External URL reference

SourceSKILL.md

529	- [Search Contacts](https://developers.hubspot.com/docs/api-reference/crm-contacts-v3/search/post-crm-v3-objects-contacts-search.md)

low line 530

External URL reference

SourceSKILL.md

530	- [List Companies](https://developers.hubspot.com/docs/api-reference/crm-companies-v3/basic/get-crm-v3-objects-companies.md)

low line 531

External URL reference

SourceSKILL.md

531	- [Create Company](https://developers.hubspot.com/docs/api-reference/crm-companies-v3/basic/post-crm-v3-objects-companies.md)

low line 532

External URL reference

SourceSKILL.md

532	- [List Deals](https://developers.hubspot.com/docs/api-reference/crm-deals-v3/basic/get-crm-v3-objects-0-3.md)

low line 533

External URL reference

SourceSKILL.md

533	- [Create Deal](https://developers.hubspot.com/docs/api-reference/crm-deals-v3/basic/post-crm-v3-objects-0-3.md)

low line 534

External URL reference

SourceSKILL.md

534	- [Associations API](https://developers.hubspot.com/docs/api-reference/crm-associations-v4/basic/get-crm-v4-objects-objectType-objectId-associations-toObjectType.md)

low line 535

External URL reference

SourceSKILL.md