Cornerstone Talentlink
v1.0.0Cornerstone TalentLink integration. Manage data, records, and automate workflows. Use when the user wants to interact with Cornerstone TalentLink data.
⭐ 0· 30·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Cornerstone TalentLink integration) matches the instructions: all actions are performed through the Membrane CLI and the skill focuses on listing actions, running actions, and proxying requests to Cornerstone. There are no unrelated requirements (no AWS keys, no unrelated binaries).
Instruction Scope
SKILL.md only instructs the agent/operator to install and use the Membrane CLI, log in, create a connector connection, list/run actions, or proxy requests. It does not ask for arbitrary file reads, environment variables, or to exfiltrate data to unrelated endpoints. It does instruct use of Membrane's proxy (which is expected for this integration).
Install Mechanism
There is no automated install spec in the registry; the instructions tell the user to run `npm install -g @membranehq/cli` (and use `npx` in one example). Installing an npm package globally executes third-party code on the host — this is expected for a CLI integration but carries the normal npm risk. The package comes from the public npm registry (not an arbitrary download URL), which is proportionate to the task but worth verifying before installing.
Credentials
The skill declares no required env vars, no config paths, and no secrets. It explicitly instructs the user not to provide API keys and to rely on Membrane's connection flow. The absence of unrelated credentials is appropriate for the stated purpose.
Persistence & Privilege
The skill is instruction-only, has always: false, and does not request persistent system privileges or try to modify other skills or system-wide settings. Autonomous invocation is allowed (platform default) but this is not combined with broad privileges or credential access.
Assessment
This skill is coherent: it uses the Membrane CLI to manage Cornerstone TalentLink connections rather than asking for API keys. Before installing or using it, (1) verify the npm package @membranehq/cli is the official package you expect (check the publisher, download stats, and repository), (2) be aware that traffic and data will be proxied through Membrane's servers when you create a connection—review the OAuth/auth consent scopes and Membrane's privacy/security policy and your org's compliance rules, (3) prefer using npx or a local install if you want to avoid global installs, and (4) confirm that granting Connector access to your Cornerstone tenant is acceptable for your security posture. If you need more assurance, ask the publisher for a signed repository link or an organizational security review of Membrane.Like a lobster shell, security has layers — review code before you run it.
latestvk97f43xqmb27mtyd0fnxvjsmy18481hy
License
MIT-0
Free to use, modify, and redistribute. No attribution required.