Uplo Accounting
v1.0.0AI-powered accounting knowledge management. Search bookkeeping records, tax preparation documents, audit support files, and financial statement workpapers wi...
0· 167·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
high confidenceThe skill's stated purpose (accounting knowledge access) is plausible, but the package metadata, runtime instructions, and config files contradict each other and omit required tooling/credentials—this mismatch is concerning and worth verifying before installation.
评估建议
This skill appears to be a legitimate accounting knowledge connector, but there are red flags you should address before installing or providing credentials:
- Confirm source and authenticity: the package lists no homepage and the registry owner is opaque; verify this extension actually comes from your vendor or a trusted UPLO provider.
- Resolve the metadata mismatch: skill.json requires agentdocs_url and api_key, but the registry display claimed no required credentials — do not ignore the cred...详细分析 ▾
ℹ 用途与能力
Functionality (searching accounting docs, GraphRAG, exporting org context) is coherent with the name/description and the skill.json's declared MCP integration. However the registry metadata presented earlier claimed no required credentials or config, while skill.json requires an agentdocs_url and an API_KEY — that discrepancy is unexplained and reduces trust.
ℹ 指令范围
SKILL.md restricts actions to MCP calls (mcporter call uplo-accounting.<tool>) and polite rules (cite sources, respect classification). Those calls are within the skill's stated purpose. Two practical concerns: (1) SKILL.md expects a 'mcporter' CLI available, but required-binaries was declared as none; (2) SKILL.md includes logging (log_conversation) and export_org_context which will transmit org data to the configured UPLO endpoint — expected for this skill but sensitive, so verify policies and data minimization.
ℹ 安装机制
Registry contains no install spec (instruction-only), which is lower technical risk. README suggests using 'clawhub install' or running an MCP server via 'npx @agentdocs1/mcp-server' — that would download/run code from npm at install/runtime. Because the skill itself doesn't enforce that, users may inadvertently execute external packages; verify the npm package owner/contents before running.
⚠ 凭证需求
skill.json legitimately requires config.agentdocs_url and config.api_key (secret) to access a UPLO instance. Those credentials are proportionate to the claimed purpose. The concern is that the registry metadata you were shown reported no required env/config; this mismatch could lead to accidental omission of credentials or misuse. Also ensure the API key has least privilege (read-only for search, not broad admin) because the skill can export org context and log conversations.
✓ 持久化与权限
The skill does not request always:true and does not modify other skills. It is instruction-only with no packaged code run by default, so it does not demand elevated platform presence.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/18
- Initial release of uplo-accounting. - Provides AI-powered search and extraction for bookkeeping, tax, audit, and financial statement documentation. - Offers key commands for knowledge search, context retrieval, directive guidance, and session logging. - Emphasizes citation of sources, respect for classification, and transparency about knowledge coverage.
● 无害
安装命令 点击复制
官方npx clawhub@latest install uplo-accounting
镜像加速npx clawhub@latest install uplo-accounting --registry https://cn.clawhub-mirror.com
技能文档
You have access to organizational knowledge through UPLO, focused on accounting domain expertise.
Session Start
When you begin a new session, fetch your organizational context:
mcporter call uplo-accounting.get_identity_context
When to Use
- Questions about accounting policies, procedures, or processes
- Looking up domain-specific knowledge and documentation
- Finding subject matter experts
- Verifying facts against the knowledge base
Key Tools
Search knowledge:
mcporter call uplo-accounting.search_knowledge query="your question here"
Search with full context (GraphRAG):
mcporter call uplo-accounting.search_with_context query="complex question with org context"
Export org context:
mcporter call uplo-accounting.export_org_context
Get directives:
mcporter call uplo-accounting.get_directives
Session End
Log the conversation:
mcporter call uplo-accounting.log_conversation summary="Brief summary" topics='["topic1"]' tools_used='["search_knowledge"]'
Important
- Always cite sources when sharing UPLO information
- Respect classification levels
- If UPLO doesn't have the answer, say so rather than guessing
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制