📦 Uplo Education — AI教育知识管理
v1.0.0一站式 AI 教育知识库，秒搜课程大纲、学生档案、认证数据与院校研究报告，结构化结果助力教学决策。
0· 228·0 当前·0 累计
by 下载技能包
最后更新
2026/3/20
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill appears to be a legitimate connector to an UPLO/AgentDocs knowledge service, but take these precautions before installing:
- Verify the source: ask the publisher for a homepage or repository and review the @agentdocs1/mcp-server npm package code (or vendor-supplied binaries) before allowing the agent to run npx to fetch it.
- Resolve the metadata inconsistency: the registry summary says no env vars are required but skill.json requires agentdocs_url and api_key. Confirm you will provi...详细分析 ▾
✓ 用途与能力
Name, README, SKILL.md, and skill.json all describe an UPLO connector for institutional education knowledge (search, GraphRAG, exports). The required config (agentdocs_url and api_key in skill.json) is coherent with a connector to an external UPLO/agentdocs service.
✓ 指令范围
SKILL.md instructs the agent to call domain-specific tools (search_knowledge, search_with_context, export_org_context, etc.) and to respect data classification and FERPA. It does not instruct reading unrelated system files, scanning local creds, or exfiltrating data to unexpected endpoints within the provided text.
⚠ 安装机制
There is no explicit install spec in the registry record, but skill.json config instructs launching an MCP server via `npx @agentdocs1/mcp-server --http`. That will download and execute a scoped npm package at runtime. Using npx to fetch and run code is a legitimate connector pattern but is higher risk than an instruction-only skill because it pulls third‑party code from the npm registry; the package scope (@agentdocs1) is not a widely-known public project in this manifest, so you should verify the package's origin and contents before enabling.
ℹ 凭证需求
skill.json declares two required configs: agentdocs_url and api_key (an MCP token). Those are proportionate for a connector to an external UPLO instance. However, the top-level 'Requirements' section in the registry summary stated 'Required env vars: none' which contradicts skill.json. This metadata inconsistency could lead to confusion during install or inadvertent misconfiguration.
✓ 持久化与权限
The skill is not always-enabled and does not request special system paths or persistent privileges. It uses the normal MCP model invocation flow; autonomous invocation is permitted (platform default) and appropriate for this connector.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/20
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install uplo-education
镜像加速npx clawhub@latest install uplo-education --registry https://cn.longxiaskill.com镜像同步中