Gusto

Gusto payroll & HR — manage employees, payroll, benefits, and tax forms via REST API

Security Scan

The skill's code and instructions mostly match its payroll/HR purpose, but there are a few unexpected or sloppy behaviours (reading a workspace .env, an apparent bug around company_id substitution, and a third-party homepage) that merit caution before use with real payroll credentials.

Purpose & Capability

Name, description, declared env vars (GUSTO_ACCESS_TOKEN, GUSTO_COMPANY_ID) and the included CLI script align with a Gusto REST API integration—these credentials are plausible and necessary for the stated purpose.

Instruction Scope

SKILL.md only instructs the agent to run the included Python CLI with the declared env vars, which is appropriate. The script itself, however, will attempt to read a .env file from WORKSPACE or ~/.openclaw/workspace if the env var is not set—this file-read behavior is not documented in SKILL.md and broadens the scope of data the skill will access.

Install Mechanism

No install spec; the skill is instruction + a single Python script using only the stdlib. This is low-risk compared with arbitrary downloads or external installers.

Credentials

The skill requires only two credentials, which is proportionate. However, get_env() will also look for those variables inside a .env file located under WORKSPACE or ~/.openclaw/workspace—a location that may contain other unlisted secrets. The SKILL.md does not declare WORKSPACE or mention the .env lookup. Also, the script uses GUSTO_COMPANY_ID in code but fails to substitute company_id into path placeholders (a functional bug), which could result in malformed requests if not fixed.

Persistence & Privilege

The skill does not request permanent 'always' inclusion, does not install system-wide components, and does not modify other skills' config. It runs as an on-demand CLI tool.

What to consider before installing

This skill largely matches its stated purpose, but take these precautions before using it with real payroll credentials: 1) Review the script locally—get_env() will open ~/.openclaw/workspace/.env (or a WORKSPACE path) to look for variables; make sure that file does not contain unrelated secrets you don't want the skill accessing. 2) The code contains a likely bug: many API paths keep the literal '{company_id}' placeholder instead of inserting GUSTO_COMPANY_ID; test in a safe environment first. 3) Confirm the GUSTO_ACCESS_TOKEN scope is least-privilege (read-only if you only need reads) and prefer a test account/token. 4) Note the skill's homepage is a third-party developer site (agxntsix.ai), not Gusto's official domain—verify trustworthiness of the publisher before providing sensitive credentials. 5) If you must use it, run it in an isolated environment (limited token, container, or throwaway account) until you are satisfied it behaves as expected.

Gusto payroll & HR — manage employees, payroll, benefits, and tax forms via REST API

Requirements

Variable	Required	Description
GUSTO_ACCESS_TOKEN	✅	OAuth access token
GUSTO_COMPANY_ID	✅	Company UUID

Quick Start

# Get company info
python3 {{baseDir}}/scripts/gusto.py company

# List locations
python3 {{baseDir}}/scripts/gusto.py locations

# List employees
python3 {{baseDir}}/scripts/gusto.py employees

# Get employee
python3 {{baseDir}}/scripts/gusto.py employee-get id <value>

# Create employee
python3 {{baseDir}}/scripts/gusto.py employee-create --first_name <value> --last_name <value> --email <value>

# List payrolls
python3 {{baseDir}}/scripts/gusto.py payrolls --start_date <value> --end_date <value>

# Get payroll
python3 {{baseDir}}/scripts/gusto.py payroll-get id <value>

# List pay schedules
python3 {{baseDir}}/scripts/gusto.py pay-schedules

All Commands

Command	Description
company	Get company info
locations	List locations
employees	List employees
employee-get	Get employee
employee-create	Create employee
payrolls	List payrolls
payroll-get	Get payroll
pay-schedules	List pay schedules
compensations	List compensations
benefits	List benefits
employee-benefits	List employee benefits
contractors	List contractors
contractor-payments	List contractor payments
tax-forms	List tax forms
garnishments	List garnishments

Output Format

All commands output JSON by default. Add --human for readable formatted output.

python3 {{baseDir}}/scripts/gusto.py <command> --human

Script Reference

Script	Description
{{baseDir}}/scripts/gusto.py	Main CLI — all commands in one tool

Credits

Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.

📅 Need help setting up OpenClaw for your business? Book a free consultation