palantir-install-auth

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to install official Palantir Foundry SDKs from standard registries (PyPI and npm). These include foundry-platform-sdk, palantir-sdk, @osdk/client, and @osdk/oauth.
  • [CREDENTIALS_UNSAFE]: The documentation follows security best practices by instructing users to store sensitive credentials like FOUNDRY_TOKEN and FOUNDRY_CLIENT_SECRET in a .env file and specifically warns against committing this file to version control.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for ingesting configuration data such as hostnames and authentication tokens. These inputs are properly scoped for use in SDK initialization code and do not involve unsafe interpolation into agent prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 09:36 PM
Security Audit — agent-trust-hub — palantir-install-auth