← 返回 Skills 市场
Sanity CMS
作者
dwhite-oss
· GitHub ↗
· v1.0.0
· MIT-0
126
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install sanity
功能描述
Query and manage Sanity CMS content via GROQ queries and the Sanity HTTP API. Use when asked to fetch content from a Sanity dataset, create or update documen...
安全使用建议
This skill appears to be a straightforward set of curl examples for Sanity, but the package metadata omitted the env vars the SKILL.md says are required — treat that as a red flag. Before installing or providing secrets: (1) verify the skill's source or repository (none provided here); (2) create and provide a Sanity API token with the minimal scope you need (Viewer for reads, a narrowly scoped Editor for specific writes), not a master/admin token; (3) test the skill against a non-production project/dataset first; (4) confirm network endpoints in the instructions match sanity.io (they do in SKILL.md); and (5) if you need auditability, ask the publisher to correct the registry metadata to declare required env vars so the required permissions are explicit. If you cannot verify the author or do not want to provide a token, do not install/use the skill.
功能分析
Type: OpenClaw Skill
Name: sanity
Version: 1.0.0
The 'sanity' skill bundle provides standard documentation and command examples for interacting with the Sanity CMS API via GROQ queries and mutations. It uses environment variables for authentication and targets official Sanity API endpoints (sanity.io) without any signs of data exfiltration, malicious execution, or prompt injection.
能力评估
Purpose & Capability
The skill name, description, and SKILL.md all describe Sanity CMS operations and the examples require SANITY_PROJECT_ID, SANITY_DATASET, and SANITY_API_TOKEN — these are appropriate for the stated purpose. However, the registry metadata at the top of the package declares no required env vars, which is inconsistent with the instructions.
Instruction Scope
SKILL.md contains curl examples and GROQ queries that only target Sanity endpoints and explain required env vars. The instructions do not instruct reading unrelated system files, other credentials, or exfiltrating data to unexpected endpoints; scope stays within Sanity CMS functionality.
Install Mechanism
No install spec and no code files — the skill is instruction-only and runs curl against Sanity. This is low risk from an installation perspective (nothing is downloaded or written to disk).
Credentials
The SKILL.md explicitly requires SANITY_PROJECT_ID, SANITY_DATASET, and SANITY_API_TOKEN (sensitive credentials) which are appropriate for Sanity access. The concern is the registry metadata did not declare these required env vars or a primary credential, leaving a mismatch between what the skill needs and what was advertised. Because the skill will use an API token that can permit mutations, confirm the token's scope (use least privilege, e.g., Viewer for read-only use).
Persistence & Privilege
The skill does not request persistent presence (always:false), does not modify other skills or system configs, and has no special OS restrictions. Autonomous invocation is allowed by platform default but is not combined with other privilege-extending factors here.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install sanity - 安装完成后,直接呼叫该 Skill 的名称或使用
/sanity触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
High-quality API skill by SkillPlexAI
元数据
常见问题
Sanity CMS 是什么?
Query and manage Sanity CMS content via GROQ queries and the Sanity HTTP API. Use when asked to fetch content from a Sanity dataset, create or update documen... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 126 次。
如何安装 Sanity CMS?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install sanity」即可一键安装,无需额外配置。
Sanity CMS 是免费的吗?
是的,Sanity CMS 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Sanity CMS 支持哪些平台?
Sanity CMS 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Sanity CMS?
由 dwhite-oss(@dwhite-oss)开发并维护,当前版本 v1.0.0。
推荐 Skills