Security Audit
Workday Automation
github.com/ComposioHQ/awesome-claude-skillsTrust Assessment
Workday Automation received a trust score of 86/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 1 finding: 0 critical, 1 high, 0 medium, and 0 low severity. Key findings include Broad Access to Workday HR Data and Operations.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 17, 2026 (commit 99e2a295). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Broad Access to Workday HR Data and Operations The skill provides extensive access to sensitive Workday HR data and operations. Tools like `WORKDAY_LIST_WORKERS`, `WORKDAY_LIST_ABSENCE_BALANCES`, and `WORKDAY_GET_WORKER_TIME_OFF_DETAILS` allow the LLM to retrieve detailed information about all workers, including their personal data, time off history, and balances. Furthermore, `WORKDAY_CREATE_TIME_OFF_REQUEST` enables the LLM to initiate time off requests for any worker, potentially impacting HR records and business processes. This broad scope of access to a critical HR system poses a significant risk if the LLM's actions are not carefully controlled, audited, or if the system is compromised. Implement fine-grained access controls within Workday or the MCP (Managed Connector Platform) to restrict the LLM's permissions to the minimum necessary. For example, limit data retrieval to the authenticated user's own records or require explicit human approval for sensitive actions like creating time off requests for other employees. Ensure comprehensive auditing and logging of all actions performed by the skill. | LLM | SKILL.md:17 |
Scan History
Embed Code
[](https://skillshield.io/report/91c249cd44d5f6d6)
Powered by SkillShield