Jazzhr
v1.0.2JazzHR integration. Manage data, records, and automate workflows. Use when the user wants to interact with JazzHR data.
⭐ 0· 88·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description say 'JazzHR integration' and all runtime instructions center on using the Membrane CLI to connect to JazzHR and call its APIs. There are no unrelated credential or system-access requests in the package metadata.
Instruction Scope
SKILL.md instructs installing/running the Membrane CLI, performing OAuth-style login via browser, listing/connecting Membrane connectors, running actions, and proxying API requests. All instructions are within scope for accessing/managing JazzHR data; the skill does not ask to read unrelated files or system state.
Install Mechanism
The registry has no install spec, but SKILL.md tells users to install @membranehq/cli via npm (global install). This is a reasonable approach for a CLI-based integration, but installing a global npm package requires trust in that package and may need elevated privileges; the package source (scoped @membranehq) should be verified before install.
Credentials
The skill declares no required env vars or credentials and explicitly tells agents not to ask users for JazzHR API keys, instead using Membrane-managed connections. No unrelated secrets or config paths are requested.
Persistence & Privilege
always is false and there are no instructions to modify other skills or system-wide agent settings. The skill relies on the Membrane account and CLI for auth and runs only when invoked.
Assessment
This instruction-only skill delegates all auth and API access to the Membrane CLI/proxy. Before installing or using it: (1) verify you trust the @membranehq npm package and the Membrane service (review their homepage/repository and privacy/terms); (2) be aware a global npm install may require admin privileges; (3) understand that once you create a Membrane connection, commands the agent runs can read and modify JazzHR data via that connection—limit the Membrane account's permissions if possible and only connect accounts you trust; (4) if you want to restrict automatic actions, consider disabling autonomous invocation for the skill or requiring user confirmation before making changes.Like a lobster shell, security has layers — review code before you run it.
latestvk97fxxnqztckd7brbwhh86jaa1842m7c
License
MIT-0
Free to use, modify, and redistribute. No attribution required.