Paycor

Paycor integration. Manage data, records, and automate workflows. Use when the user wants to interact with Paycor data.

This skill appears to be a straightforward Membrane-based Paycor connector, but exercise caution before installing or using it. - The SKILL.md instructs you to install the Membrane CLI via `npm install -g @membranehq/cli@latest` and to authenticate in-browser; the registry metadata did not declare this dependency — double-check that you are comfortable installing that package. - When you run `membrane login` and `membrane connect --connectorKey paycor` you will grant the Membrane connector access to your Paycor tenant; review the connector's requested scopes and only use an account with the minimum needed permissions. - Verify the npm package (@membranehq/cli) authenticity (owner, package page, checksum) before installing, especially in production or sensitive environments. - If you cannot or do not want to install global npm packages or perform interactive browser auth, do not install/use this skill. - If you need higher assurance, ask the publisher for an explicit install spec and a list of exact OAuth scopes the connector requests, or prefer installing Membrane from a vetted source (company-approved repository) and audit its network access and logs. Given the metadata/instruction mismatch and the need to install third-party CLI tooling that will handle authentication, treat this as suspicious until you confirm the CLI and connector are trustworthy.

Type: OpenClaw Skill Name: paycor Version: 1.0.1 The skill is a standard integration for the Paycor HCM platform using the Membrane CLI. It provides instructions for the agent to authenticate, discover, and execute Paycor-related actions (e.g., payroll, employee records) through the 'membrane' command-line tool. No indicators of data exfiltration, malicious execution, or harmful prompt injection were found; the skill's behavior is consistent with its stated purpose of workflow automation.