bamboohr-automation

SUSPICIOUS: The skill's HR automation purpose matches its BambooHR capabilities, but it routes sensitive employee data and auth through a third-party MCP layer and references stale/discontinued Rube setup instructions instead of BambooHR's official MCP path. This looks more like outdated and trust-reducing integration guidance than confirmed malware, but the intermediary data flow and real-world HR write actions make it medium risk.