Sentio Platform

Build, modify, or troubleshoot Sentio projects across processors, Sentio SQL in Data Studio, alerting, and dashboards. Use for tasks involving @sentio/sdk ha...

This skill is largely coherent with its stated purpose (helping with Sentio projects via the Sentio CLI), but take precautions before using it: 1) Review the SKILL.md and the included references/openapi.swagger.json yourself (or ask the publisher) to find any unexpected embedded data — the scanner flagged a base64‑style block. 2) Prefer running the commands in an isolated environment (container or VM) first rather than on a production machine. 3) Avoid pasting your Sentio API key into unfamiliar tools; consider creating a limited-scope/test key if possible. 4) When running the CLI, prefer a pinned, audited package version instead of npx @sentio/cli@latest; ask the publisher for the recommended release tag. 5) Request publisher identity/homepage or a link to the official Sentio docs to validate that this skill corresponds to the official CLI. If the base64 content or the publisher cannot be explained, do not install or run commands that authenticate with your real credentials.

Type: OpenClaw Skill Name: sentio-platform Version: 1.0.0 The skill bundle provides a comprehensive interface for managing the Sentio platform, but it relies on high-risk capabilities such as executing remote code via `npx @sentio/cli@latest` and requesting user API keys for authentication. While these actions are plausibly necessary for the stated purpose in `SKILL.md`, the use of `npx` and the handling of sensitive credentials represent a significant attack surface. No evidence of intentional malice, data exfiltration, or prompt injection was found in the `SKILL.md` or the `openapi.swagger.json` reference file.