Skip to main content

bamboohr-rate-limits

Optimizes BambooHR API requests with rate limiting and backoff strategies to enhance performance and reliability.

Install this skill

or
74/100

Security score

The bamboohr-rate-limits skill was audited on May 19, 2026 and we found 6 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 92

Template literal with variable interpolation in command context

SourceSKILL.md
92`BambooHR rate limited (attempt ${attempt + 1}/${config.maxRetries}). ` +
medium line 93

Template literal with variable interpolation in command context

SourceSKILL.md
93`Waiting ${(delay / 1000).toFixed(1)}s...`
medium line 157

Template literal with variable interpolation in command context

SourceSKILL.md
157'GET', `/employees/changed/?since=${lastSyncTimestamp}`,
medium line 167

Template literal with variable interpolation in command context

SourceSKILL.md
167'GET', `/employees/changed/tables/jobInfo?since=${lastSyncTimestamp}`,
medium line 228

Webhook reference - potential data exfiltration

SourceSKILL.md
228- **Webhook alternatives**: Use webhooks for real-time changes instead of polling (see `bamboohr-webhooks-events`)
low line 232

External URL reference

SourceSKILL.md
232- [BambooHR API Technical Overview](https://documentation.bamboohr.com/docs/api-details)
Scanned on May 19, 2026
View Security Dashboard
Installation guide →