bamboohr-install-auth
Facilitates the installation and configuration of BambooHR API authentication using HTTP Basic Auth for seamless integration.
Install this skill
Security score
The bamboohr-install-auth skill was audited on May 19, 2026 and we found 22 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 92 | const BASE_URL = `https://api.bamboohr.com/api/gateway.php/${COMPANY}/v1`; |
Template literal with variable interpolation in command context
| 96 | 'Authorization': `Basic ${Buffer.from(`${API_KEY}:x`).toString('base64')}`, |
Template literal with variable interpolation in command context
| 101 | const res = await fetch(`${BASE_URL}/employees/directory`, { headers }); |
Template literal with variable interpolation in command context
| 105 | console.log(`Connected. ${data.employees?.length ?? 0} employees found.`); |
Template literal with variable interpolation in command context
| 107 | console.error(`Auth failed: ${res.status} ${res.statusText}`); |
Template literal with variable interpolation in command context
| 109 | if (errHeader) console.error(`Detail: ${errHeader}`); |
Template literal with variable interpolation in command context
| 142 | ```bash |
Access to .env file
| 62 | # Create .env file for local development |
Access to .env file
| 63 | cat > .env << 'EOF' |
Access to .env file
| 69 | echo '.env' >> .gitignore |
Access to .env file
| 70 | echo '.env.local' >> .gitignore |
Access to .env file
| 90 | const COMPANY = process.env.BAMBOOHR_COMPANY_DOMAIN!; |
Access to .env file
| 91 | const API_KEY = process.env.BAMBOOHR_API_KEY!; |
Access to .env file
| 151 | - `.env` file created and git-ignored |
External URL reference
| 34 | https://api.bamboohr.com/api/gateway.php/{companyDomain}/v1/ |
External URL reference
| 50 | 1. Log in to BambooHR at `https://{companyDomain}.bamboohr.com` |
External URL reference
| 92 | const BASE_URL = `https://api.bamboohr.com/api/gateway.php/${COMPANY}/v1`; |
External URL reference
| 123 | BASE_URL = f"https://api.bamboohr.com/api/gateway.php/{COMPANY}/v1" |
External URL reference
| 144 | "https://api.bamboohr.com/api/gateway.php/${BAMBOOHR_COMPANY_DOMAIN}/v1/employees/directory" \ |
External URL reference
| 173 | - [BambooHR API Getting Started](https://documentation.bamboohr.com/docs/getting-started) |
External URL reference
| 174 | - [BambooHR Authentication Docs](https://documentation.bamboohr.com/docs) |
External URL reference
| 175 | - [BambooHR API Technical Overview](https://documentation.bamboohr.com/docs/api-details) |