← Back to Skills Marketplace
Uplo Finance
by
RooJenkins
· GitHub ↗
· v1.0.0
· MIT-0
147
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install uplo-finance
Description
AI-powered financial knowledge management. Search financial statements, audit findings, tax documents, and treasury records with structured extraction.
Usage Guidance
Before installing: (1) Clarify the metadata mismatch — the registry shows no required credentials but skill.json requires agentdocs_url and api_key. (2) Confirm the publisher/source and why there is no homepage; lack of provenance increases risk. (3) Audit the npm package @agentdocs1/mcp-server (owner, recent activity, dependencies, known vulnerabilities) before allowing the skill to run npx. (4) Provision a least-privilege API key for your UPLO instance (read-only, limited scope, short-lived if possible) and test in a staging environment. (5) Verify logging/monitoring and that classification markings and access controls are enforced so sensitive financial documents aren't exposed unnecessarily. (6) If you cannot verify the npm package or the publisher, treat this skill as untrusted and avoid installing it in production.
Capability Analysis
Type: OpenClaw Skill
Name: uplo-finance
Version: 1.0.0
The uplo-finance skill bundle is a legitimate financial knowledge management tool designed to interface with the UPLO platform. It utilizes standard Model Context Protocol (MCP) patterns, including the use of npx to run the '@agentdocs1/mcp-server' package and tools like 'search_knowledge' and 'export_org_context' to retrieve financial data. The instructions in SKILL.md and identity-patch.md are consistent with the stated purpose, emphasizing data classification, audit compliance, and confidentiality without any evidence of malicious intent or harmful prompt injection.
Capability Assessment
Purpose & Capability
The skill's functionality (searching UPLO-hosted financial knowledge) matches the declared capabilities in SKILL.md and README. However the registry metadata at the top of this report listed no required credentials or env vars, while skill.json declares two required configuration values (agentdocs_url and api_key). Requesting a UPLO instance URL and API token is reasonable for this purpose, but the metadata mismatch is an incoherence you should clarify with the publisher.
Instruction Scope
The SKILL.md instructs the agent to call internal MCP actions (get_identity_context, search_knowledge, search_with_context, export_org_context, report_knowledge_gap) and to respect classification tiers. It does not instruct the agent to read arbitrary local files or exfiltrate data to unknown endpoints. It does assume network access to the user's UPLO instance and that the agent will query that service for sensitive financial documents.
Install Mechanism
The skill is instruction-only in the registry, but README and skill.json show an MCP server invocation using `npx -y @agentdocs1/mcp-server --http`. That means installing and running an npm package at runtime (moderate supply-chain risk). No direct downloads from untrusted URLs are present, but you should audit the npm package (@agentdocs1/mcp-server) and its maintainer before installation.
Credentials
The declared required config (agentdocs_url and api_key) is proportionate to a connector that queries your UPLO instance. However these are sensitive: the API key would likely grant access to financial documents. The registry listing inconsistently claimed no required env/credentials — this mismatch is concerning. Ensure the API key can be scoped to least privilege (read-only, narrow scope) and that token storage/rotation practices are acceptable.
Persistence & Privilege
The skill does not request always:true, does not declare system-wide modifications, and is user-invocable. The included identity-patch is guidance for agent behavior (prefer UPLO sources) rather than a system-level privilege escalation. Autonomous invocation is allowed by default but is not by itself a red flag here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install uplo-finance - After installation, invoke the skill by name or use
/uplo-finance - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of uplo-finance: AI-powered financial knowledge management
- Enables structured search across financial statements, audit findings, tax documents, and treasury records.
- Provides precision lookup and contextual search tools for resolving complex financial queries.
- Supports workflows for quarter-end close, variance analysis, treasury, and audit.
- Includes best practices for searching period-sensitive data and handling privileged documentation.
- Introduces tools for gap reporting, context export, and mandate tracking to enhance finance team operations.
Metadata
Frequently Asked Questions
What is Uplo Finance?
AI-powered financial knowledge management. Search financial statements, audit findings, tax documents, and treasury records with structured extraction. It is an AI Agent Skill for Claude Code / OpenClaw, with 147 downloads so far.
How do I install Uplo Finance?
Run "/install uplo-finance" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Uplo Finance free?
Yes, Uplo Finance is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Uplo Finance support?
Uplo Finance is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Uplo Finance?
It is built and maintained by RooJenkins (@roojenkins); the current version is v1.0.0.
More Skills