ClawHub

Ukg Pro

v1.0.0

UKG Pro integration. Manage data, records, and automate workflows. Use when the user wants to interact with UKG Pro data.

⭐ 0· 89·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill describes UKG Pro integration and exclusively instructs use of the Membrane CLI to discover connectors, create connections, run actions, and proxy requests. The required network access and a Membrane account are consistent with that purpose.
✓
Instruction Scope
SKILL.md only tells the operator to install and use the Membrane CLI and browser-based login flows, to list connections/actions, run actions, and proxy requests. It does not instruct reading unrelated local files, harvesting environment variables, or sending data to unexpected third-party endpoints beyond Membrane's proxy.
ℹ
Install Mechanism
There is no formal install spec in the registry (instruction-only), but SKILL.md tells users to install @membranehq/cli via npm (-g) and suggests npx @membranehq/cli@latest. Installing a package from the public npm registry is expected for a CLI, but global npm installs and using @latest carry the usual supply-chain/trust considerations (verify package publisher, prefer pinned versions if required by policy).
✓
Credentials
The skill declares no env vars or local credentials and explicitly instructs to let Membrane manage API credentials and not to request user API keys. That is proportionate. Note: using Membrane means trusting Membrane's service to hold and refresh UKG Pro credentials and to proxy requests on behalf of the user.
✓
Persistence & Privilege
The skill is instruction-only and does not request persistent installation or elevated platform privileges. always is false and there is no behavior that modifies other skills or system-wide agent settings.
Assessment
This skill is coherent: it relies on the Membrane CLI and Membrane's hosted service to authenticate and proxy UKG Pro requests. Before installing or following the instructions, confirm you trust the Membrane provider (getmembrane.com / @membranehq on npm and the GitHub repo), because Membrane will hold and use your UKG Pro credentials and see data you proxy through it. Prefer verifying the npm package publisher and pinned versions instead of always using -g and @latest if your org has stricter supply-chain requirements. If your organization requires vetting third-party integrations for HR data, get approval before connecting UKG Pro through a third-party proxy service.

Like a lobster shell, security has layers — review code before you run it.

latestvk977znsqefr8nv306f8gn4xnfx84g6yd

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments