UpKuaJing global company and contact search, find global companies, verify contacts, and generate high-quality B2B leads for cross-border trade. UpKuaJing helps exporters, sourcing agents, and sales teams discover decision-makers, source suppliers, and accelerate international customer acquisition — all in one search.

Official skill for upkuajing (跨境魔方). Find companies (找公司) and global people (找人) data. Get business registration, background info, and contact details (Email...

This package appears to be internally consistent with its stated purpose, but review the following before installing or running it: - API key: You must provide UPKUAJING_API_KEY (or allow auth.py to create and save one). Only provide a key if you trust UpKuaJing; the key will be stored in ~/.upkuajing/.env (plain text) unless you manage it yourself. - Billing: The service charges per call/ID. SKILL.md requires the agent to ask for explicit confirmation before running batched operations that incur fees — the scripts themselves do not enforce interactive confirmation. Make sure the agent or user workflow actually prompts you before large/batched queries or you may incur charges. - Local files: The skill will create and update files under ~/.upkuajing (env, version_cache.json, optional logs) and task_data in the skill folder. If you are concerned about persistence of API keys or query results, review or remove these files after use. - Network calls: Each API call also triggers a version-check POST to https://openapi.upkuajing.com/api/skills/version (once per day by default), which sends the skill name. If you want to avoid this, you can disable or modify the version_check behavior in the code before using the skill. - Privacy/compliance: The skill returns personal contact information (emails, phone, WhatsApp). Ensure you have lawful basis to collect and use this data for your use case. If any of the above concerns are unacceptable, inspect or modify the scripts locally (they are plain Python) before running, or avoid providing your API key.

Type: OpenClaw Skill Name: upkuajing-global-company-people-search Version: 1.0.6 The skill bundle provides a legitimate interface for the UpKuaJing (跨境魔方) business intelligence platform. It includes scripts for searching company and personnel data, managing API keys, and checking account balances. Security-wise, the code demonstrates good practices, such as using UUID validation in `common.py` to prevent path traversal attacks when handling task data. The `version_check.py` script performs standard update checks against the official domain (openapi.upkuajing.com), and the instructions in `SKILL.md` focus on user confirmation for fee-incurring actions rather than attempting to subvert agent behavior.