📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills bamboohr-automation
📦
bamboohr-automation
Content revision r2 High Risk ⚙️ External commands🌐 Network access
Automate BambooHR Workflows
Manual BambooHR lookups and updates consume HR time and increase consistency risks. This skill guides structured workflows through Rube MCP with current tool discovery.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "bamboohr-automation" from https://skillstore.io/skills/sickn33-bamboohr-automation.md and its manifest at https://skillstore.io/api/skills/sickn33-bamboohr-automation/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "bamboohr-automation". Find Jordan Lee and show department, job title, work email, and status.
Expected outcome:
Jordan Lee was found. Department: Finance. Job title: Senior Analyst. Work email: jordan.lee@example.com. Status: Active.
Using "bamboohr-automation". Prepare changing Casey Morgan's work phone to 555-0142.
Expected outcome:
Casey Morgan currently has work phone 555-0108. Proposed value: 555-0142. Confirmation is required before updating BambooHR.
Using "bamboohr-automation". Check Sam Patel's vacation balance and prepare a request for September 14 through September 16.
Expected outcome:
Vacation balance is 64 hours. The proposed request covers three days. No request was submitted because confirmation is still required.
Security Audit
High Riskv5 • 8/14/2026 Open versioned report
The 45 command-execution alerts are false positives caused by Markdown backticks, and the four reconnaissance alerts describe normal BambooHR lookups or permission notes. The external MCP endpoint is a real network dependency, while sensitive HR access and unconfirmed write workflows create significant contextual risk.
1
Files scanned
230
Lines analyzed
1
Review items
0
False positives ignored
Confirmed security concerns (2)
High
Sensitive HR and dependent data exposure
The workflows retrieve employee, dependent, benefit, and potentially SSN data through a third-party MCP connection. Excessive permissions or mishandled outputs could expose highly sensitive records.
The skill explicitly supports dependent and benefit retrieval and identifies employee data, including SSNs, as sensitive PII.
High
High-impact HR mutations lack confirmation controls
The skill supports creating and changing leave requests, approving or denying requests, and updating employee profiles. It does not require explicit confirmation before these mutations.
The documented tool sequences include several write operations, while the surrounding safeguards address permissions and current values but not human confirmation.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Low
Hardcoded URL
**Get Rube MCP**: Add `https://rube.app/mcp` as an MCP server in your client configuration. No API k
Line 21 directs clients to configure the external Rube MCP endpoint, which can mediate BambooHR operations. This expected dependency creates real third-party network and data-handling risk.
Risk Factors
⚙️ External commands (45)
SKILL.md:16 SKILL.md:17 SKILL.md:21 SKILL.md:24 SKILL.md:25 SKILL.md:36 SKILL.md:37 SKILL.md:42 SKILL.md:43 SKILL.md:48 SKILL.md:50 SKILL.md:57 SKILL.md:60 SKILL.md:61 SKILL.md:64 SKILL.md:74 SKILL.md:75 SKILL.md:76 SKILL.md:77 SKILL.md:78 SKILL.md:81 SKILL.md:82 SKILL.md:84 SKILL.md:85 SKILL.md:86 SKILL.md:87 SKILL.md:88 SKILL.md:89 SKILL.md:90 SKILL.md:104 SKILL.md:105 SKILL.md:108 SKILL.md:109 SKILL.md:123 SKILL.md:124 SKILL.md:127 SKILL.md:141-145 SKILL.md:145-148 SKILL.md:148-152 SKILL.md:152-157 SKILL.md:157-163 SKILL.md:163-167 SKILL.md:167-172 SKILL.md:172-202 SKILL.md:202-203
🌐 Network access (1)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-bamboohr-automation/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-bamboohr-automation?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-bamboohr-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-bamboohr-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-bamboohr-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). bamboohr-automation security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-bamboohr-automation/audits/5BibTeX citation
@techreport{sickn33-sickn33-bamboohr-automation-2026,
author = {sickn33},
title = {bamboohr-automation security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-bamboohr-automation/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "bamboohr-automation security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-08-14"
url: "https://skillstore.io/skills/sickn33-bamboohr-automation/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-bamboohr-automation:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance
What You Can Build
Review employee records
Find an employee and retrieve only the fields needed for an HR support request.
Manage leave requests
Check balances, prepare a leave request, and confirm any authorized status change.
Monitor employee changes
Identify changed employee records since the last synchronization timestamp for downstream processing.
Try These Prompts
Find an employee
Find [employee name] in BambooHR. Return their department, job title, work email, and employment status only.
Check leave availability
Check the [leave type] balance for [employee]. Resolve the employee and leave type IDs first. Do not create a request.
Prepare a profile update
Read [employee] and prepare changing [field] from its current value to [new value]. Ask for confirmation before updating BambooHR.
Run an incremental change review
Find employee records changed since [ISO 8601 timestamp]. Retrieve [approved fields], summarize differences, and exclude sensitive fields from the output.
Best Practices
- Discover current tool schemas before supplying parameters.
- Request the minimum employee fields needed for the task.
- Confirm the target and proposed changes before every write operation.
Avoid
- Do not retrieve full employee or dependent records without a defined need.
- Do not approve leave or update employee data from ambiguous requests.
- Do not expose BambooHR responses in shared logs or unrelated prompts.
Frequently Asked Questions
What is required before using this skill?
Configure Rube MCP, authenticate an authorized BambooHR connection, and confirm that the connection is active.
Can it update employee information?
Yes. It can update supported fields when BambooHR permissions allow the action and the user confirms the exact change.
Can it approve time-off requests?
It can update request status for authorized manager or administrator accounts. Organizational approval rules still apply.
How does it protect sensitive data?
The workflow should request minimal fields, use least-privilege access, redact outputs, and avoid logging employee or dependent data.
Why must tools be searched first?
Rube and BambooHR schemas can change. Tool discovery provides current names, parameters, and response structures.
Does it support employee synchronization?
It can find records changed since a timestamp and retrieve selected details. External storage and update processing require separate systems.
Developer Details
Author
sickn33License
MIT
Skillstore revision
r2
Version notice
The author did not declare a version.
Repository
https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/bamboohr-automationRef
5a26d1d61d694db29af9b138c661c1981076d9df
Maintenance freshness
8/15/2026
Usage
11 downloads · 109 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-fullstack
82Build Fullstack Apps with Senior Patterns
Teams need consistent setup, architecture, and review guidance for modern web applications. This skill provides scaffolders, workflow references, and quality prompts for React, Next.js, Node.js, GraphQL, and PostgreSQL projects.
Coding & Development View
📦
senior-architect
81Design Scalable Software Architectures
Architecture decisions are hard to compare across web, mobile, backend, and cloud systems. This skill provides structured guides and local scaffold scripts for reports, dependency review, and trade-off documentation.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
lark-doc
87Manage Lark Docs and Feishu Wiki Content
by larksuite
Teams need reliable document updates without switching between tools. This skill guides Claude, Codex, and Claude Code through authenticated lark-cli workflows for Lark Docs.
Office & Reports View
📦
pptx
85Create PowerPoint Presentations with Python
by AutumnsGrove
Building polished PowerPoint decks by hand is slow and hard to repeat. This skill guides Claude, Codex, and Claude Code through PPTX creation, editing, and automation with python-pptx.
Office & Reports View
📦
lark-sheets
85Manage Lark Sheets with Reliable CLI Workflows
by larksuite
Complex spreadsheet work requires precise commands and careful validation. This skill guides Claude, Codex, and Claude Code through reliable Lark Sheets operations.
Office & Reports View
📦
xlsx
84Create and analyze Excel workbooks
by AutumnsGrove
Creating reliable Excel workbooks requires careful formula, formatting, and data handling. This skill provides structured workflows for building, editing, and analyzing spreadsheets with Python tools.
Office & Reports View
📦
capa-officer
84Manage CAPA Investigations and Action Plans
by alirezarezvani
CAPA work often stalls when investigations, actions, and evidence are not structured. This skill guides clear RCA, action planning, verification, metrics, and inspection-ready documentation.
Office & Reports View
📦
prettify-pdf
83Redesign PDFs Without Changing Critical Facts
by sethupavan12
Important PDFs can become easier to read while still preserving exact source facts. This skill guides Claude, Codex, and Claude Code through redesign and verification.
Office & Reports View