Ukg Pro Workforce Management
v1.0.0UKG Pro Workforce Management integration. Manage data, records, and automate workflows. Use when the user wants to interact with UKG Pro Workforce Management...
⭐ 0· 50·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The name/description promise UKG Pro Workforce Management integration and the SKILL.md exclusively documents using the Membrane CLI to create a connection, list/run actions, or proxy requests to UKG. Required capabilities (network, Membrane account, Membrane CLI) align with that purpose.
Instruction Scope
All runtime instructions are limited to installing and using the Membrane CLI, authenticating via Membrane, discovering and running connector actions, and proxying requests to the UKG API via Membrane. The only broader capability is the ability to proxy arbitrary UKG endpoints through Membrane (expected for an integration, but it means the CLI can send arbitrary request bodies/paths to the UKG API via Membrane). The instructions do not ask the agent to read unrelated files or environment variables.
Install Mechanism
There is no embedded install spec in the package registry, but the SKILL.md instructs installing @membranehq/cli globally via npm. This is a common approach for CLIs but carries the usual npm-global risks (package install-time scripts can run). The package comes from npm (not an arbitrary download URL), which is moderate risk and expected for a CLI dependency.
Credentials
The skill requests no local environment variables or secrets. Authentication is delegated to Membrane (browser-based login) rather than asking for API keys. Requiring a Membrane account and network access is proportionate to the stated integration purpose. Note: using Membrane means credentials and proxied requests are handled by Membrane's service.
Persistence & Privilege
The skill does not request always:true, does not declare persistent config paths, and is user-invocable only. Autonomous invocation is permitted (default) but not combined with other concerning privileges. There is no instruction to modify other skills or system-wide settings.
Assessment
This skill appears coherent: it instructs the agent to use the Membrane CLI to manage UKG Pro data and doesn't request unrelated credentials. Before installing, verify the @membranehq/cli package on npm (publisher, download counts, repo) and review its install scripts because npm global installs can run code. Understand that authentication and proxied requests go through Membrane's service — using this skill means trusting Membrane to store/refresh UKG credentials and to handle API requests. If you prefer not to delegate credentials to a third party, do not use this skill; alternatively, run the documented membrane commands manually so you can inspect outputs and approve any requests before the agent acts autonomously.Like a lobster shell, security has layers — review code before you run it.
latestvk97cpd42w2mkww8zwsxe9jz8ah84d8d8
License
MIT-0
Free to use, modify, and redistribute. No attribution required.