← 返回 Skills 市场
Pipeworx bamboohr
作者
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
86
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pipeworx-bamboohr
功能描述
Access and manage BambooHR employee data, including directory, individual profiles, time-off requests, and employee files via API.
安全使用建议
This skill wants to read and manage sensitive HR records but does not declare how it authenticates and points the agent at an external gateway (gateway.pipeworx.io). Before installing: 1) Ask the publisher to prove ownership/trustworthiness of gateway.pipeworx.io and provide privacy/security documentation (who hosts it, where data is stored, retention, logging, access controls, SOC/ISO reports). 2) Require the skill to declare where credentials belong (do you need a BambooHR API key? will credentials be stored on the gateway?), and prefer a version that calls api.bamboohr.com directly or documents a vetted connector. 3) Do not enable this skill for production HR data until you confirm the gateway’s security and obtain an explicit data-flow and auth model. If you cannot verify these things, consider the risk that employee data could be routed to or retained by an untrusted third party.
功能分析
Type: OpenClaw Skill
Name: pipeworx-bamboohr
Version: 1.0.0
The skill bundle provides a standard integration for BambooHR via an MCP server hosted at gateway.pipeworx.io. It defines functions for managing employee data, time-off requests, and files in SKILL.md. No malicious code, obfuscation, or prompt injection attempts were found.
能力评估
Purpose & Capability
The skill's stated purpose is to access and manage BambooHR employee data. However, it declares no required environment variables, no primary credential, and no config paths for BambooHR API keys — yet the SKILL.md contains an mcpServers entry pointing to https://gateway.pipeworx.io/bamboohr/mcp. Either the gateway will handle authentication (not documented) or the skill is missing required credentials. This mismatch (sensitive HR access without declared auth) is unexpected.
Instruction Scope
Instructions are brief and only list available operations, but the included mcpServers config directs the agent to an external, third-party gateway (pipeworx). The SKILL.md does not describe how authentication, logging, or data handling occur, nor does it limit where retrieved employee data may be sent. Because the agent would call a non-BambooHR endpoint to retrieve HR records, the instruction scope potentially routes sensitive data to an external service without disclosure.
Install Mechanism
This is an instruction-only skill with no install spec and no code files. Nothing will be written to disk by an installer, which is the lowest-risk install mechanism.
Credentials
For a skill that accesses HR data, one expects explicit credentials (BambooHR API key or OAuth token) or at least documentation of where credentials are stored. The skill requests no env vars and no primary credential, which is disproportionate and ambiguous — it implies reliance on the external gateway for auth without documenting it.
Persistence & Privilege
always is false and the skill does not request elevated or persistent system privileges. Autonomous invocation is allowed by default (disable-model-invocation: false), which is normal, but combined with the other concerns increases potential impact if the gateway is untrusted.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pipeworx-bamboohr - 安装完成后，直接呼叫该 Skill 的名称或使用
/pipeworx-bamboohr触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Pipeworx bamboohr 是什么？
Access and manage BambooHR employee data, including directory, individual profiles, time-off requests, and employee files via API. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 86 次。
如何安装 Pipeworx bamboohr？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pipeworx-bamboohr」即可一键安装，无需额外配置。
Pipeworx bamboohr 是免费的吗？
是的，Pipeworx bamboohr 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Pipeworx bamboohr 支持哪些平台？
Pipeworx bamboohr 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pipeworx bamboohr？
由 Bruce Gutman（@b-gutman）开发并维护，当前版本 v1.0.0。
推荐 Skills