Employment Hero
v1.0.2Employment Hero integration. Manage data, records, and automate workflows. Use when the user wants to interact with Employment Hero data.
⭐ 0· 71·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name/description (Employment Hero integration) matches the instructions: it tells the user/agent to use the Membrane CLI to connect to Employment Hero and run actions. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md contains only step-by-step CLI instructions for installing the Membrane CLI, logging in, creating/inspecting connections, running actions, and proxying requests. It does not instruct the agent to read arbitrary local files, export unrelated environment variables, or exfiltrate data to unexpected endpoints. It does require network access and a Membrane account (declared).
Install Mechanism
There is no registry install spec; the README instructs the user to run `npm install -g @membranehq/cli`. This is a normal instruction but it means the user will install a global npm package (system-level change). The package comes from the @membranehq npm scope (not an arbitrary URL), which is expected for this workflow; the registry did not itself perform the install.
Credentials
The skill does not request any environment variables or secrets in the registry metadata. Authentication is delegated to Membrane (browser login / Membrane-managed credentials). That is proportionate for a connector that proxies to Employment Hero.
Persistence & Privilege
always:false and no special privileges are requested. The skill does not ask to modify other skills or system-wide settings. The agent may invoke it autonomously by default (platform behavior), which is expected for a callable integration.
Assessment
This skill is instruction-only and tells the agent to use the Membrane CLI to access Employment Hero. Before installing/using it: 1) Verify the @membranehq/cli package on npm (publisher, downloads, source) before running `npm install -g`. Global npm installs alter your system PATH. 2) Understand that a Membrane account will hold the Employment Hero credentials and proxy requests — only use if you trust Membrane (getmembrane.com) and audit what connections and scopes are granted. 3) Prefer using a least-privilege Membrane connection (dedicated account or limited-permission connection) for Production data. 4) If you need stronger guarantees, review Membrane's privacy/security docs and the connector’s action list in a test environment before running operations that modify production HR/payroll data.Like a lobster shell, security has layers — review code before you run it.
latestvk973hmt8h74kqvq7ayeexra291842ypt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.