bamboohr-upgrade-migration
Facilitates the migration of BambooHR API with breaking change detection, ensuring smooth transitions to updated endpoints.
Install this skill
Security score
The bamboohr-upgrade-migration skill was audited on May 19, 2026 and we found 17 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 58 | const LEGACY = `https://api.bamboohr.com/api/gateway.php/${domain}/v1`; |
Template literal with variable interpolation in command context
| 61 | const MODERN = `https://${domain}.bamboohr.com/api/v1`; |
Template literal with variable interpolation in command context
| 71 | const xmlRes = await fetch(`${BASE}/employees/directory`, { |
Template literal with variable interpolation in command context
| 77 | const jsonRes = await fetch(`${BASE}/employees/directory`, { |
Template literal with variable interpolation in command context
| 122 | console.warn(`Deprecated field '${oldField}' — use '${replacement}' instead`); |
Template literal with variable interpolation in command context
| 196 | ```bash |
Webhook reference - potential data exfiltration
| 176 | enableNewWebhookFormat: boolean; |
Webhook reference - potential data exfiltration
| 182 | enableNewWebhookFormat: false, // Testing in staging |
Access to .env file
| 180 | useNewEndpoint: process.env.BAMBOOHR_USE_NEW_ENDPOINT === 'true', |
External URL reference
| 45 | echo " Past changes: https://documentation.bamboohr.com/docs/past-changes-to-the-api" |
External URL reference
| 46 | echo " Planned changes: https://documentation.bamboohr.com/docs/planned-changes-to-the-api" |
External URL reference
| 47 | echo " Status page: https://status.bamboohr.com" |
External URL reference
| 58 | const LEGACY = `https://api.bamboohr.com/api/gateway.php/${domain}/v1`; |
External URL reference
| 61 | const MODERN = `https://${domain}.bamboohr.com/api/v1`; |
External URL reference
| 233 | - [BambooHR Past API Changes](https://documentation.bamboohr.com/docs/past-changes-to-the-api) |
External URL reference
| 234 | - [BambooHR Planned API Changes](https://documentation.bamboohr.com/docs/planned-changes-to-the-api) |
External URL reference
| 235 | - [BambooHR Field Names](https://documentation.bamboohr.com/docs/list-of-field-names) |