bamboohr-sdk-patterns
Provides production-ready patterns for integrating with the BambooHR API using TypeScript and Python, enhancing coding standards and reusability.
Install this skill
Security score
The bamboohr-sdk-patterns skill was audited on May 19, 2026 and we found 15 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 73 | this.base = `https://api.bamboohr.com/api/gateway.php/${config.companyDomain}/v1`; |
Template literal with variable interpolation in command context
| 74 | this.auth = `Basic ${Buffer.from(`${config.apiKey}:x`).toString('base64')}`; |
Template literal with variable interpolation in command context
| 83 | const res = await fetch(`${this.base}${path}`, { |
Template literal with variable interpolation in command context
| 111 | return this.request<Record<string, string>>('GET', `/employees/${id}/?fields=${fields.join(',')}`); |
Template literal with variable interpolation in command context
| 123 | return this.request<void>('POST', `/employees/${id}/`, data); |
Template literal with variable interpolation in command context
| 137 | return this.request<any[]>('GET', `/time_off/requests/?${params}`); |
Template literal with variable interpolation in command context
| 142 | return this.request<any[]>('GET', `/employees/${employeeId}/tables/${table}`); |
Template literal with variable interpolation in command context
| 146 | return this.request<void>('POST', `/employees/${employeeId}/tables/${table}`, data); |
Template literal with variable interpolation in command context
| 157 | super(`BambooHR ${status}: ${message} [${path}]`); |
Template literal with variable interpolation in command context
| 193 | console.warn(`Retry ${attempt + 1}/${maxRetries} in ${delay.toFixed(0)}ms`); |
External URL reference
| 73 | this.base = `https://api.bamboohr.com/api/gateway.php/${config.companyDomain}/v1`; |
External URL reference
| 263 | self.base = f"https://api.bamboohr.com/api/gateway.php/{self.company_domain}/v1" |
External URL reference
| 306 | - [BambooHR API Technical Overview](https://documentation.bamboohr.com/docs/api-details) |
External URL reference
| 307 | - [BambooHR Field Names](https://documentation.bamboohr.com/docs/list-of-field-names) |
External URL reference
| 308 | - [Zod Documentation](https://zod.dev/) |