Smartrecruiters
v1.0.2SmartRecruiters integration. Manage data, records, and automate workflows. Use when the user wants to interact with SmartRecruiters data.
⭐ 0· 73·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description claim SmartRecruiters integration and the SKILL.md exclusively instructs using the Membrane CLI and Membrane-managed connections/proxying to access SmartRecruiters. No unrelated credentials, binaries, or paths are requested.
Instruction Scope
Instructions stay within the integration scope (install Membrane CLI, login, create/list connections, run actions, proxy requests). Note: it instructs opening a browser for auth and recommends proxying arbitrary SmartRecruiters endpoints through Membrane, which will send user data to Membrane-managed servers — expected for this integration but worth understanding.
Install Mechanism
No install spec in registry; SKILL.md suggests installing @membranehq/cli via npm (global install) and uses npx @membranehq/cli@latest in examples. npm/global installs and npx@latest fetch code from the public npm registry at install/run time — standard but means third-party code will be executed on the host. Consider pinning versions or using npx without global install if you prefer less system-wide change.
Credentials
The skill declares no required environment variables or secrets. It relies on a Membrane account and Membrane-managed connections (server-side auth). That is proportionate, but it implies trusting Membrane with SmartRecruiters access tokens.
Persistence & Privilege
always is false and no install spec modifies system or other skills. The skill can be invoked autonomously (default platform behavior) but does not request elevated persistence or cross-skill config changes.
Assessment
This skill is coherent for SmartRecruiters integration, but review a few things before installing:
- Verify the Membrane CLI package (@membranehq/cli) and its source on npm/GitHub before running a global install; prefer pinning to a known version instead of using @latest.
- Understand that Membrane will hold and use SmartRecruiters credentials server-side and will proxy API requests on your behalf — you are granting Membrane access to your SmartRecruiters data. Review Membrane’s privacy/security docs and your organization’s policy.
- The skill’s commands open browser-based auth flows; in headless environments you’ll exchange one-time codes. Ensure you trust the auth process and the machine used.
- If you are cautious about installing global npm packages, use npx with a pinned version or run the CLI in an isolated environment.
- If you want tighter control, restrict the skill’s autonomous invocation in agent settings or require user confirmation for any connection/authorization actions.Like a lobster shell, security has layers — review code before you run it.
latestvk970s8fdgf3cf32k29a2wfe2wd842y5s
License
MIT-0
Free to use, modify, and redistribute. No attribution required.