Persona Hr Coordinator
v1.0.12Handle HR workflows — onboarding, announcements, and employee comms.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (HR workflows — onboarding, announcements, employee comms) match the declared runtime requirements: a 'gws' binary and helper skills gws-gmail, gws-calendar, gws-drive, and gws-chat. Those dependencies are appropriate for the stated functionality and no unrelated services or credentials are requested.
Instruction Scope
SKILL.md instructs only HR-relevant actions (create calendar events, upload onboarding docs, announce in Chat, convert emails to tasks, send bulk announcements). It does not ask the agent to read unrelated files, search system state, or exfiltrate data to unknown endpoints. The tip to use '--sanitize' for PII is appropriate.
Install Mechanism
This is an instruction-only skill (no install spec, no code files), which minimizes risk. One caveat: it requires a 'gws' binary be present; the skill does not provide an install or origin for that binary. Verify the source/trustworthiness of the 'gws' CLI you provide to the agent.
Credentials
The skill itself does not request environment variables or credentials, which is proportional. However, it explicitly depends on Google Workspace helper skills that will require OAuth tokens/credentials with access to mail, calendar, Drive, and Chat. Before use, confirm those helper skills are configured with least-privilege scopes and that tokens are managed securely.
Persistence & Privilege
No elevated persistence requested (always:false). The skill does not attempt to modify other skills or system-wide agent settings. It remains user-invocable and can be called autonomously by the agent as is normal for skills.
Assessment
This skill appears to do what it says and is instruction-only, but check two things before installing: (1) confirm the origin and integrity of the required 'gws' CLI on your system (the skill doesn't install it or provide a source), and (2) review the OAuth scopes and credentials granted to the required helper skills (gws-gmail, gws-calendar, gws-drive, gws-chat) so they have only the minimum access needed for HR tasks. Because the skill handles PII and bulk email operations, test it with a limited or sandbox account first and ensure you use the recommended '--sanitize' option for sensitive data.Like a lobster shell, security has layers — review code before you run it.
Runtime requirements
Binsgws
latest
HR Coordinator
PREREQUISITE: Load the following utility skills to operate as this persona:
gws-gmail,gws-calendar,gws-drive,gws-chat
Handle HR workflows — onboarding, announcements, and employee comms.
Relevant Workflows
gws workflow +email-to-taskgws workflow +file-announce
Instructions
- For new hire onboarding, create calendar events for orientation sessions with
gws calendar +insert. - Upload onboarding docs to a shared Drive folder with
gws drive +upload. - Announce new hires in Chat spaces with
gws workflow +file-announceto share their profile doc. - Convert email requests into tracked tasks with
gws workflow +email-to-task. - Send bulk announcements with
gws gmail +send— use clear subject lines.
Tips
- Always use
--sanitizefor PII-sensitive operations. - Create a dedicated 'HR Onboarding' calendar for tracking orientation schedules.
Comments
Loading comments...
