bamboohr-cost-tuning
Optimizes BambooHR integration costs by reducing API requests and monitoring usage patterns for efficient operations.
Install this skill
Security score
The bamboohr-cost-tuning skill was audited on May 19, 2026 and we found 20 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 74 | const key = `${call.method} ${call.endpoint}`; |
Template literal with variable interpolation in command context
| 79 | console.log(`Total calls: ${this.callLog.length}`); |
Template literal with variable interpolation in command context
| 80 | console.log(`Time window: ${((Date.now() - this.callLog[0]?.timestamp || 0) / 1000 / 60).toFixed(1)} minutes`); |
Template literal with variable interpolation in command context
| 84 | console.log(` ${count.toString().padStart(5)} (${pct}%) ${endpoint}`); |
Template literal with variable interpolation in command context
| 106 | `/employees/changed/?since=${lastSync}`); |
Template literal with variable interpolation in command context
| 186 | console.warn(`Request budget exhausted. Waiting ${(waitMs / 1000).toFixed(0)}s`); |
Webhook reference - potential data exfiltration
| 92 | **Pattern 1: Replace polling with webhooks** |
Webhook reference - potential data exfiltration
| 101 | // GOOD: Use webhooks for real-time changes (0 polling calls) |
Webhook reference - potential data exfiltration
| 102 | // See bamboohr-webhooks-events skill |
Webhook reference - potential data exfiltration
| 107 | // Only process if webhook missed something |
Webhook reference - potential data exfiltration
| 134 | // GOOD: Cache with webhook-based invalidation |
Webhook reference - potential data exfiltration
| 147 | // Invalidate on webhook |
Webhook reference - potential data exfiltration
| 148 | function onWebhookReceived() { |
Webhook reference - potential data exfiltration
| 234 | - Polling replaced with webhooks where possible |
Webhook reference - potential data exfiltration
| 237 | - Caching with webhook-based invalidation |
Webhook reference - potential data exfiltration
| 243 | | Webhooks vs polling | 288/day | 24/day (safety net) | 92% | |
Webhook reference - potential data exfiltration
| 253 | | Stale cached data | Cache TTL too long | Reduce TTL or invalidate on webhook | |
Webhook reference - potential data exfiltration
| 254 | | Webhook delivery gaps | BambooHR delivery failure | Keep hourly polling as fallback | |
External URL reference
| 259 | - [BambooHR Pricing](https://www.bamboohr.com/pricing) |
External URL reference
| 260 | - [BambooHR API Technical Overview](https://documentation.bamboohr.com/docs/api-details) |