Alliancehcm
v1.0.2AllianceHCM integration. Manage data, records, and automate workflows. Use when the user wants to interact with AllianceHCM data.
⭐ 0· 42·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name and description state an AllianceHCM integration and the instructions consistently show how to use the Membrane CLI to discover connectors, create a connection, run actions, and proxy requests to AllianceHCM. Required capabilities (network and a Membrane account) match the stated purpose.
Instruction Scope
Instructions are scoped to installing and using the Membrane CLI and interacting with AllianceHCM via Membrane. They do not instruct reading unrelated local files or harvesting environment variables. However, the skill relies on routing requests and HR data through the Membrane service (getmembrane.com), which is an external data egress — users should be aware that sensitive employee data will traverse that third party.
Install Mechanism
There is no formal install spec in the registry; runtime instructions ask the user to run `npm install -g @membranehq/cli` (or use npx). Installing a global npm package runs third‑party code on the host and thus requires trusting the package/maintainers. This is proportionate to the task but carries the usual supply‑chain risk of npm packages.
Credentials
The skill declares no required environment variables or credentials and explicitly recommends using Membrane connections instead of local API keys. That is proportionate to an integration that delegates auth to a hosted service.
Persistence & Privilege
The skill is not always-enabled and does not request persistent system privileges or modify other skills. It relies on the platform default allowing autonomous invocation, which is expected for skills; nothing here elevates privilege beyond normal.
Assessment
This skill appears coherent and does what it says: it uses the Membrane CLI to connect to AllianceHCM. Before installing or using it, consider: (1) you must trust the Membrane service (requests and HR data will be proxied through their servers); (2) installing `@membranehq/cli` runs third‑party code — inspect the package or repository, prefer `npx` or run in an isolated environment if you are cautious; (3) follow organizational data policies when sending payroll/employee data to a third party; (4) create and use least‑privilege accounts/connections in Membrane where possible; and (5) verify the Membrane project repository and package integrity (review code, check maintainer reputation, and use `npm audit`) if handling sensitive data.Like a lobster shell, security has layers — review code before you run it.
latestvk970v57hjs7xs6ap42as3k7vqn8431fb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.