Workday

Workday integration. Manage Organizations, Deals, Leads, Projects, Pipelines, Goals and more. Use when the user wants to interact with Workday data.

This skill looks coherent but consider these practical precautions before installing/using it: - Understand that Workday data will be proxied through Membrane's service/CLI. Review Membrane's privacy, security, and data retention policies and confirm you trust that third party. - The instructions ask you to run a global npm install of @membranehq/cli@latest. Installing npm packages globally runs code on install (postinstall hooks); prefer to review the package source (GitHub repo), pin a specific version, or run it in an isolated environment (container/VM) if you have security concerns. - Authentication is interactive (browser or code). Ensure you only complete login flows you initiated and that the connection id returned is stored by Membrane per their docs. - Verify that you have the right Workday permissions and that your organization allows third-party connectors. - Absence of static scan findings here only means there were no code files to scan—it does not guarantee safety. If you need higher assurance, ask the publisher for the CLI release artifacts, checksums, and the Membrane security documentation before deploying in production.

Type: OpenClaw Skill Name: workday Version: 1.0.3 The skill provides instructions for an AI agent to manage Workday data using the Membrane CLI (@membranehq/cli). It follows a standard integration pattern where authentication and API interactions are delegated to a third-party platform (Membrane), and it explicitly instructs the agent not to request sensitive credentials from the user. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found in SKILL.md or _meta.json.