Palantir Foundry CLI

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Concern

ASI03: Identity and Privilege Abuse

What this means

If installed and used with a privileged token, the agent can act as the user's Foundry identity, potentially including production or admin access.

Why it was flagged

The skill instructs use of Foundry tokens and named profiles, including production, even though the registry metadata declares no primary credential or required env vars.

Skill content

export FOUNDRY_TOKEN="your-token"
export FOUNDRY_HOST="foundry.company.com"
...
pltr <command> --profile production

Recommendation

Use a least-privilege token and a non-production profile by default; declare the required credential/binary in metadata and require explicit user approval before using privileged profiles.

Concern

ASI02: Tool Misuse and Exploitation

What this means

A mistaken or overly autonomous invocation could permanently delete business resources or make other high-impact Foundry changes.

Why it was flagged

The skill documents irreversible resource deletion and shows an example using --force, which bypasses confirmation.

Skill content

pltr resource permanently-delete RESOURCE_RID [--force]
# WARNING: This action is irreversible!
# Example
pltr resource permanently-delete ri.foundry.main.dataset.abc123 --force

Recommendation

Require explicit confirmation for deletes, permission changes, stream resets, publishes, and admin actions; avoid --force/--confirm unless the user specifically asks for it.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

The package install is expected for this skill, but users must trust the external pltr-cli package and its dependencies.

Why it was flagged

The skill relies on an external CLI package installed from PyPI, but the skill has no install spec or pinned dependency information.

Skill content

pip install pltr-cli

# Or with pipx (isolated)
pipx install pltr-cli

Recommendation

Install with pipx or a controlled virtual environment, pin reviewed versions, and verify the package source before use.

Note

ASI07: Insecure Inter-Agent Communication

What this means

Agent session exports or LLM-related commands could expose sensitive conversation metadata or content if run without care.

Why it was flagged

The skill can enumerate and export AIP Agent conversation sessions, which may contain sensitive agent-session data.

Skill content

### Export Session History
pltr aip-agents sessions list ri.foundry.main.agent.abc123 \
    --all \
    --format json \
    --output all-sessions.json

Recommendation

Only export agent sessions or send text to language-model features when the user has confirmed the data is allowed to leave its current context.