Hr Cloud
v1.0.1HR Cloud integration. Manage data, records, and automate workflows. Use when the user wants to interact with HR Cloud data.
⭐ 0· 53·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (HR Cloud integration) matches the instructions: all runtime steps use the Membrane CLI to discover and run HR Cloud actions or proxy requests. No unrelated credentials, binaries, or system paths are requested.
Instruction Scope
SKILL.md instructs installing and using the Membrane CLI, logging in via browser, creating connections, listing/running actions, and proxying API requests. It does not instruct reading unrelated files, harvesting environment variables, or exfiltrating data outside the Membrane/HR Cloud flow.
Install Mechanism
No automated install spec is provided (instruction-only). The doc recommends installing @membranehq/cli via `npm install -g`, which is a typical approach but executes code from the public npm registry and requires caution (global installs run with your user privileges).
Credentials
The skill declares no required env vars or credentials. It relies on Membrane to manage auth server-side, which is proportionate to the stated design. Verify you are comfortable delegating HR API credentials to Membrane.
Persistence & Privilege
The skill is not always-enabled and does not request persistent system changes. As an instruction-only skill it does not modify other skills or system-wide settings.
Assessment
This skill is internally consistent: it expects you to install and use the Membrane CLI and to authenticate via Membrane to access HR Cloud. Before installing or using it:
- Verify the publisher and package: confirm the npm package @membranehq/cli and the GitHub repository are legitimate and maintained by the vendor you expect.
- Understand data flow: Membrane will proxy requests and handle credentials, so HR data and auth tokens will be visible to the Membrane service—review their privacy/security policies and trust boundaries.
- Installing with `npm install -g` runs code from the npm registry with your user privileges; prefer testing in a non-production environment first.
- Do not supply unrelated secrets or local credentials to the skill. If you need stricter control, evaluate whether direct HR Cloud API integration (with scoped service accounts) better fits your security posture.Like a lobster shell, security has layers — review code before you run it.
latestvk97659a2pa3djkceg4qya3e09d84ere6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.