Greenhouse

Greenhouse ATS — manage candidates, jobs, applications, offers, and interviews via Harvest API

Security Scan

The skill largely matches its stated purpose (Greenhouse Harvest API access) but includes a few implementation oddities (reading a workspace .env file not declared in SKILL.md and a minor suspicious coding artifact) that warrant review before installation.

Purpose & Capability

Name, description, and requested credential (GREENHOUSE_API_KEY) match: the tool is a CLI for the Greenhouse Harvest API and requires the Harvest API key (primaryEnv = GREENHOUSE_API_KEY), which is proportionate to the stated purpose.

Instruction Scope

SKILL.md instructs the agent to run the included CLI script and only lists GREENHOUSE_API_KEY. The script additionally reads an optional .env file from WORKSPACE or ~/.openclaw/workspace/.env to source environment variables. That filesystem access and implicit config-file lookup is not documented in SKILL.md and expands the agent's scope of reading user files beyond what the README declares.

Install Mechanism

No install spec (instruction-only with an included script). Nothing is downloaded or written by an installer; risk from install mechanism is low.

Credentials

Only GREENHOUSE_API_KEY is declared and used as the credential. The script also respects a WORKSPACE env var to find a .env file, but it does not request or require additional secret env vars. This is mostly proportional, but reading the .env file can expose unrelated secrets if present.

Persistence & Privilege

Skill is not always-enabled and does not request persistent agent privileges. It does not modify other skills or agent configuration per the provided files.

What to consider before installing

This skill appears to be a functional CLI for the Greenhouse Harvest API and legitimately needs only your GREENHOUSE_API_KEY. Two things to review before installing: (1) the included script will try to read a .env file from the WORKSPACE path or ~/.openclaw/workspace/.env if GREENHOUSE_API_KEY isn't in the process environment; that behavior is not documented in SKILL.md and could reveal other variables stored there — ensure that file doesn't contain unrelated secrets or set GREENHOUSE_API_KEY explicitly in the agent environment instead. (2) There is a small coding oddity (an empty get_env call path was written but not used) which looks like a harmless bug, but you may want to inspect the full script yourself. If you proceed, prefer creating a dedicated Harvest API key with limited scope and run the skill in a sandbox or non-production account until you are comfortable.

Greenhouse ATS — manage candidates, jobs, applications, offers, and interviews via Harvest API

Requirements

Variable	Required	Description
GREENHOUSE_API_KEY	✅	Harvest API key

Quick Start

# List candidates
python3 {{baseDir}}/scripts/greenhouse.py candidates --per_page <value> --job_id <value>

# Get candidate
python3 {{baseDir}}/scripts/greenhouse.py candidate-get id <value>

# Create candidate
python3 {{baseDir}}/scripts/greenhouse.py candidate-create --first_name <value> --last_name <value> --email_addresses <value>

# List applications
python3 {{baseDir}}/scripts/greenhouse.py applications --status <value> --job_id <value>

# Get application
python3 {{baseDir}}/scripts/greenhouse.py application-get id <value>

# Advance application
python3 {{baseDir}}/scripts/greenhouse.py application-advance id <value>

# Reject application
python3 {{baseDir}}/scripts/greenhouse.py application-reject id <value> --rejection_reason_id <value>

# List jobs
python3 {{baseDir}}/scripts/greenhouse.py jobs --status <value>

All Commands

Command	Description
candidates	List candidates
candidate-get	Get candidate
candidate-create	Create candidate
applications	List applications
application-get	Get application
application-advance	Advance application
application-reject	Reject application
jobs	List jobs
job-get	Get job
job-stages	List job stages
offers	List offers
interviews	List interviews
scorecards	List scorecards
departments	List departments
offices	List offices
users	List users
sources	List sources

Output Format

All commands output JSON by default. Add --human for readable formatted output.

python3 {{baseDir}}/scripts/greenhouse.py <command> --human

Script Reference

Script	Description
{{baseDir}}/scripts/greenhouse.py	Main CLI — all commands in one tool

Credits

Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.

📅 Need help setting up OpenClaw for your business? Book a free consultation