← 返回 Skills 市场
1849
总下载
3
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install pltr-cli
功能描述
Use the pltr CLI to query datasets, run SQL, manage builds, ontologies, projects, users, streams, AI agents, and ML models in Palantir Foundry.
安全使用建议
This skill's documentation expects the pltr CLI and Foundry credentials (FOUNDRY_TOKEN/FOUNDRY_HOST) and even references Anthropic/OpenAI usage, but the registry metadata does not declare those requirements. Before installing or enabling it: 1) Confirm where and how pltr is installed on your agent environment and whether the agent will actually have the pltr binary available. 2) Verify how Foundry credentials would be provided—do not place tokens in an unrestricted environment variable if you don't want the model to access them. 3) Ask the publisher to update metadata to declare required env vars and binaries (ANTHROPIC/OPENAI keys if used). 4) Limit invocation scope (disable autonomous model invocation for this skill or require explicit user consent) and restrict credentials to least privilege. 5) Audit any workflows that download or export dataset files and avoid sending sensitive data to external LLM endpoints unless you understand and accept the data residency/privacy implications.
功能分析
Type: OpenClaw Skill
Name: pltr-cli
Version: 1.0.1
The OpenClaw AgentSkills skill bundle for `pltr-cli` is benign. It provides comprehensive documentation and example scripts for interacting with Palantir Foundry, covering administrative tasks, data operations, and pipeline management. All commands and scripts are focused on legitimate `pltr-cli` functionality, such as listing/creating resources, executing SQL queries, managing permissions, and exporting data to local files. There is no evidence of intentional harmful behavior, data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection attempts against the AI agent to deviate from its stated purpose.
能力评估
Purpose & Capability
The skill claims to be a pltr (Palantir Foundry) CLI helper and includes many admin, dataset, orchestration, and streaming commands — that purpose justifies needing the pltr CLI and Foundry credentials. However, the registry metadata declares no required binaries, no required env vars, and no primary credential while the SKILL.md clearly expects the pltr CLI to be available and authentication via FOUNDRY_TOKEN/FOUNDRY_HOST. This mismatch between declared requirements and actual needs is incoherent.
Instruction Scope
The runtime instructions instruct the agent to run many high-privilege operations (copy datasets, download files, manage users/roles, publish stream records) and to supply/verify authentication. They also reference sending messages to Anthropic Claude and generating OpenAI embeddings. The instructions allow reading and exporting dataset files to local paths and interacting with external LLM endpoints, which could be used to move sensitive data off-platform. The SKILL.md gives the agent broad operational capabilities beyond simple read-only queries.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so there is nothing being downloaded or written by an installer. That lowers supply-chain risk, but it also means the skill assumes existing local tools (pltr, Python SDK) are present without declaring them.
Credentials
The SKILL.md explicitly documents environment variables (FOUNDRY_TOKEN, FOUNDRY_HOST) and references external LLM usage (Anthropic/OpenAI) but the skill metadata lists zero required env vars and no primary credential. Sensitive credentials are implied but not declared. That mismatch hides the fact that using the skill requires access to potentially sensitive tokens and third-party API keys (not documented in metadata), which is disproportionate to the explicit registry declaration.
Persistence & Privilege
The skill is not marked always:true and there is no OS restriction, but disableModelInvocation is not set (defaulting to allowing model invocation). That means the agent could call this skill autonomously if platform policy permits. Combined with the skill's ability to run high-privilege pltr commands and the undeclared requirement for Foundry credentials, this raises a risk that the model could perform sensitive operations without explicit user prompts—consider requiring manual invocation or disabling autonomous invocation for high-privilege skills.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install pltr-cli - 安装完成后,直接呼叫该 Skill 的名称或使用
/pltr-cli触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
pltr-cli 1.0.1 changelog:
- Updated `reference/filesystem-commands.md` with revised instructions or examples for filesystem-related CLI commands.
- Improved `workflows/permission-management.md` to clarify steps and enhance guidance on permission and access control in Foundry.
- No changes to core functionality or interface. Documentation and workflow improvements only.
v1.0.0
pltr-cli 1.0.0 initial release:
- Introduces a comprehensive skill for working with Palantir Foundry via the pltr CLI.
- Supports querying datasets, managing orchestration builds, working with ontologies, running SQL queries, managing filesystem objects, handling admin operations, and more.
- Provides guided usage for authentication, output formats, profile selection, and working with RIDs.
- Includes quick reference commands and points to relevant documentation for common tasks and workflows.
- Recommends best practices for efficient and reliable Foundry CLI operations.
元数据
常见问题
Palantir Foundry CLI 是什么?
Use the pltr CLI to query datasets, run SQL, manage builds, ontologies, projects, users, streams, AI agents, and ML models in Palantir Foundry. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1849 次。
如何安装 Palantir Foundry CLI?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pltr-cli」即可一键安装,无需额外配置。
Palantir Foundry CLI 是免费的吗?
是的,Palantir Foundry CLI 完全免费(开源免费),可自由下载、安装和使用。
Palantir Foundry CLI 支持哪些平台?
Palantir Foundry CLI 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Palantir Foundry CLI?
由 anjor(@anjor)开发并维护,当前版本 v1.0.1。
推荐 Skills