← Back to Skills Marketplace
Uplo Knowledge Management
by
RooJenkins
· GitHub ↗
· v1.0.0
· MIT-0
224
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install uplo-knowledge-management
Description
AI-powered knowledge management intelligence. Search taxonomies, content curation records, expertise directories, and communities of practice with structured...
Usage Guidance
This skill appears to be a legitimate connector to an UPLO/MCP instance. Before installing: (1) verify you trust the UPLO instance URL and owner of the npm package (@agentdocs1), (2) supply a least-privilege API key (read-only if possible) because the skill can export organizational context and expertise data, (3) be aware that the MCP server is launched via npx which will fetch code from the npm registry — review the package and its publisher if you can, and (4) test in a non-production environment first to confirm the data returned and any automated actions (e.g., report_knowledge_gap) behave as you expect. Also note the registry metadata omitted required config but skill.json includes it — ensure you provision the listed agentdocs_url and api_key only if this aligns with your security policies.
Capability Analysis
Type: OpenClaw Skill
Name: uplo-knowledge-management
Version: 1.0.0
The skill is classified as suspicious due to the inclusion of the 'export_org_context' tool (found in skill.json and README.md), which enables bulk extraction of the entire organizational knowledge base. Instructions in SKILL.md and identity-patch.md steer the agent to use these high-privilege tools 'aggressively' and to 'always query UPLO first,' which significantly increases the risk of data exfiltration via prompt injection. Additionally, the skill's configuration uses 'npx' to execute the '@agentdocs1/mcp-server' package at runtime, introducing a potential supply chain vulnerability.
Capability Assessment
Purpose & Capability
The skill is described as an UPLO knowledge-management connector and the declared capabilities (search_knowledge, search_with_context, export_org_context, etc.) align with that purpose. The skill.json requires an agentdocs_url and api_key to reach an UPLO/MCP server — these credentials are appropriate for a connector of this type. (Note: the registry summary above listed no required env/config, but the included skill.json does declare two required config entries; this appears to be a metadata mismatch rather than malicious behavior.)
Instruction Scope
SKILL.md instructs the agent to call well-scoped MCP tools (get_identity_context, search_with_context, search_knowledge, export_org_context, report_knowledge_gap, etc.). These actions stay within knowledge-management activities (searching, exporting org context, flagging gaps). The instructions do not tell the agent to read unrelated system files, environment variables, or to send data to unknown external endpoints beyond the configured UPLO/MCP server.
Install Mechanism
There is no platform-level install spec in the registry listing, but the README and skill.json indicate the MCP server is run via npx @agentdocs1/mcp-server (npm). Fetching an npm package at runtime is a typical pattern for MCP adapters but carries the usual moderate risk of executing code fetched from the npm registry. No direct downloads from untrusted URLs or archive extracts are present.
Credentials
The only required configuration in skill.json is agentdocs_url and api_key (the UPLO/MCP instance URL and token). Those are proportionate to a knowledge-management connector. The skill does not request unrelated credentials or broad system-level secrets.
Persistence & Privilege
The skill is not always-enabled, does not request system-wide configuration changes, and contains no instructions to modify other skills. It operates as a connector that may read/export organizational context via the configured MCP endpoint — appropriate for its stated purpose.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install uplo-knowledge-management - After installation, invoke the skill by name or use
/uplo-knowledge-management - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: AI-powered knowledge management skill for organizational learning.
- Enables structured search across taxonomies, expertise directories, content curation records, and communities of practice.
- Provides example KM-focused workflows, such as knowledge audits, taxonomy governance, and organizational knowledge health assessments.
- Details essential tools including search_with_context, search_knowledge, export_org_context, report_knowledge_gap, flag_outdated, and propose_update.
- Offers guidance, best practices, and tips for KM practitioners to identify knowledge gaps, manage content lifecycle, and optimize knowledge sharing.
Metadata
Frequently Asked Questions
What is Uplo Knowledge Management?
AI-powered knowledge management intelligence. Search taxonomies, content curation records, expertise directories, and communities of practice with structured... It is an AI Agent Skill for Claude Code / OpenClaw, with 224 downloads so far.
How do I install Uplo Knowledge Management?
Run "/install uplo-knowledge-management" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Uplo Knowledge Management free?
Yes, Uplo Knowledge Management is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Uplo Knowledge Management support?
Uplo Knowledge Management is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Uplo Knowledge Management?
It is built and maintained by RooJenkins (@roojenkins); the current version is v1.0.0.
More Skills