bamboohr-automation

SUSPICIOUS. The skill's BambooHR automation scope is coherent, but it depends on a deprecated Rube MCP endpoint and routes sensitive HR operations through a third-party intermediary rather than BambooHR's direct official MCP server. No evidence of malware or hidden payloads, but the stale setup and intermediary data path make the skill medium risk.