bamboohr-cost-tuning
Optimizes BambooHR integration costs by reducing API calls and monitoring usage patterns for efficient operations.
Install this skill
Security score
The bamboohr-cost-tuning skill was audited on Jun 3, 2026 and we found 20 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 66 | const key = `${call.method} ${call.endpoint}`; |
Template literal with variable interpolation in command context
| 71 | console.log(`Total calls: ${this.callLog.length}`); |
Template literal with variable interpolation in command context
| 72 | console.log(`Time window: ${((Date.now() - this.callLog[0]?.timestamp || 0) / 1000 / 60).toFixed(1)} minutes`); |
Template literal with variable interpolation in command context
| 76 | console.log(` ${count.toString().padStart(5)} (${pct}%) ${endpoint}`); |
Template literal with variable interpolation in command context
| 98 | `/employees/changed/?since=${lastSync}`); |
Template literal with variable interpolation in command context
| 178 | console.warn(`Request budget exhausted. Waiting ${(waitMs / 1000).toFixed(0)}s`); |
Webhook reference - potential data exfiltration
| 84 | **Pattern 1: Replace polling with webhooks** |
Webhook reference - potential data exfiltration
| 93 | // GOOD: Use webhooks for real-time changes (0 polling calls) |
Webhook reference - potential data exfiltration
| 94 | // See bamboohr-webhooks-events skill |
Webhook reference - potential data exfiltration
| 99 | // Only process if webhook missed something |
Webhook reference - potential data exfiltration
| 126 | // GOOD: Cache with webhook-based invalidation |
Webhook reference - potential data exfiltration
| 139 | // Invalidate on webhook |
Webhook reference - potential data exfiltration
| 140 | function onWebhookReceived() { |
Webhook reference - potential data exfiltration
| 226 | - Polling replaced with webhooks where possible |
Webhook reference - potential data exfiltration
| 229 | - Caching with webhook-based invalidation |
Webhook reference - potential data exfiltration
| 235 | | Webhooks vs polling | 288/day | 24/day (safety net) | 92% | |
Webhook reference - potential data exfiltration
| 245 | | Stale cached data | Cache TTL too long | Reduce TTL or invalidate on webhook | |
Webhook reference - potential data exfiltration
| 246 | | Webhook delivery gaps | BambooHR delivery failure | Keep hourly polling as fallback | |
External URL reference
| 251 | - [BambooHR Pricing](https://www.bamboohr.com/pricing) |
External URL reference
| 252 | - [BambooHR API Technical Overview](https://documentation.bamboohr.com/docs/api-details) |