Paycor
v1.0.0Paycor integration. Manage data, records, and automate workflows. Use when the user wants to interact with Paycor data.
⭐ 0· 60·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Paycor integration) matches the instructions: all runtime steps call the Membrane CLI to discover connectors, create connections, run actions, or proxy requests to the Paycor API. Nothing requested or instructed appears unrelated to Paycor integration.
Instruction Scope
Instructions are constrained to installing and using the Membrane CLI and its commands (login, connect, action run, request). They do not instruct reading unrelated files or environment variables. Note: the skill implicitly grants access to sensitive HR/payroll data once a Paycor connection is established — that is expected for this integration but worth awareness.
Install Mechanism
This is an instruction-only skill (no install spec), but the README recommends installing @membranehq/cli via npm -g. Installing a global npm package is normal here but has moderate risk in general (arbitrary code from npm). Verify the @membranehq/cli package and publisher before installing.
Credentials
The skill declares no required env vars or credentials and relies on Membrane to handle authentication. That is proportionate to the stated purpose. However, connecting will grant access to Paycor data (payroll/HR), so ensure the Membrane account and Paycor connection use appropriate, least-privileged credentials and policies.
Persistence & Privilege
The skill does not request always: true or any system-level persistence. It is user-invocable and does not modify other skills or global agent settings according to the provided metadata.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to interact with Paycor. Before installing or using it, verify the @membranehq/cli npm package and the Membrane project (publisher, GitHub repo, and security/privacy docs). Understand that connecting gives access to sensitive HR and payroll data—use a dedicated, least-privileged Membrane/Paycor account and confirm who can access the agent that will use this skill. Installing the CLI globally requires npm permissions and will run third-party code, so review the package and avoid installing on shared or highly privileged machines without review.Like a lobster shell, security has layers — review code before you run it.
latestvk9789fghr8qa4p24fjxh0fy5g584bjhj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.