← Back to Skills Marketplace
Subscribe Hr
by
Vlad Ursul
· GitHub ↗
· v1.0.1
· MIT-0
160
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install subscribe-hr
Description
Subscribe-HR integration. Manage data, records, and automate workflows. Use when the user wants to interact with Subscribe-HR data.
Usage Guidance
This skill looks like a legitimate Subscribe‑HR integration that uses the Membrane CLI, but note the metadata omits the CLI dependency and install step the SKILL.md requires. Before installing or running: 1) verify the @membranehq/cli package on the npm registry (publisher, recent versions, and downloads) and confirm the homepage/repository links are trustworthy; 2) prefer using npx to avoid a global install, or install in an isolated environment/container; 3) validate the OAuth/login flow shown in a browser (don't paste secrets into chat) and review the connection's scopes and permissions when you create the Membrane connection; 4) ask the publisher to update the registry metadata to declare required binaries (node/npm/npx) and add an explicit install spec so you can audit what will be installed. If the publisher provides those clarifications, my confidence would increase to benign.
Capability Analysis
Type: OpenClaw Skill
Name: subscribe-hr
Version: 1.0.1
The skill bundle provides instructions for an AI agent to interact with the Subscribe-HR platform using the Membrane CLI. The logic is centered on legitimate HR data management and workflow automation. It includes security best practices, such as instructing the agent to never ask for user credentials and instead rely on Membrane's managed authentication. No indicators of malicious intent, data exfiltration, or harmful prompt injection were found in SKILL.md or _meta.json.
Capability Tags
Capability Assessment
Purpose & Capability
The name/description (Subscribe-HR integration) align with the runtime instructions (use the Membrane CLI to connect to Subscribe-HR). However, the registry metadata declares no required binaries or install steps while the SKILL.md instructs installing and running the Membrane CLI (npm / npx). This mismatch is a packaging/metadata inconsistency.
Instruction Scope
SKILL.md stays within the stated purpose: it instructs the agent to install and use the Membrane CLI to discover, create, and run Subscribe-HR actions and to use the provided OAuth-like login flow. It does not instruct reading unrelated files, exfiltrating environment variables, or contacting unexpected endpoints beyond Membrane/Subsrcibe-HR.
Install Mechanism
There is no formal install spec in the registry, but the instructions tell users to install @membranehq/cli via npm (or use npx). Installing an npm package is a network install and will execute code on the host; the registry should have declared this requirement. The instruction-only skill leaving the install implicit increases risk because the CLI source/package is not validated in metadata.
Credentials
The skill declares no required env vars or credentials and explicitly advises not to ask users for API keys, instead using Membrane-managed connections. That is proportionate to its purpose. The SKILL.md does require a Membrane account and network access, which is reasonable.
Persistence & Privilege
always is false and the skill is user-invocable. It does not request persistent elevated privileges or claim to modify other skills or system-wide configuration. Autonomous invocation is allowed by default but is not combined here with other red flags.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install subscribe-hr - After installation, invoke the skill by name or use
/subscribe-hr - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Auto sync from membranedev/application-skills
v1.0.0
Auto sync from membranedev/application-skills
Metadata
Frequently Asked Questions
What is Subscribe Hr?
Subscribe-HR integration. Manage data, records, and automate workflows. Use when the user wants to interact with Subscribe-HR data. It is an AI Agent Skill for Claude Code / OpenClaw, with 160 downloads so far.
How do I install Subscribe Hr?
Run "/install subscribe-hr" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Subscribe Hr free?
Yes, Subscribe Hr is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Subscribe Hr support?
Subscribe Hr is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Subscribe Hr?
It is built and maintained by Vlad Ursul (@gora050); the current version is v1.0.1.
More Skills