← Back to Skills Marketplace
Uplo Defense
by
RooJenkins
· GitHub ↗
· v1.0.0
· MIT-0
227
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install uplo-defense
Description
AI-powered defense knowledge management. Search mission documentation, logistics records, personnel data, and ITAR-controlled information with structured ext...
Usage Guidance
This skill appears to be a connector to a UPLO instance and its runtime will send queries and logs to whatever agentdocs_url you configure using the provided API key. Before installing: (1) reconcile the manifest inconsistency — confirm the skill actually requires agentdocs_url and api_key and that the registry view is out-of-date; (2) verify the authenticity and provenance of the npm package @agentdocs1/mcp-server (review the package source, maintainers, and recent versions) or prefer a vetted internal distribution; (3) ensure the configured agentdocs_url points to an internal, access-controlled UPLO instance (not a public host) and that the API key is scoped with least privilege and audited; (4) confirm your organization’s export-control/security team approves sending ITAR/EAR data to this endpoint and that logging (log_conversation) meets retention and audit requirements; (5) test in a sandbox with non-sensitive data first. If you cannot verify the npm package or the endpoint, treat the skill as untrusted for controlled defense data.
Capability Analysis
Type: OpenClaw Skill
Name: uplo-defense
Version: 1.0.0
The uplo-defense skill is a specialized knowledge management tool designed for defense organizations to manage ITAR-controlled data and mission documentation. It functions as a connector to an external MCP server (@agentdocs1/mcp-server) and includes instructions in SKILL.md and identity-patch.md that reinforce security protocols, such as identity verification and clearance-level checks. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the high-privilege tools (e.g., export_org_context) are consistent with the stated purpose of organizational knowledge management.
Capability Assessment
Purpose & Capability
The skill claims to provide structured, access-controlled searches over defense documentation and the SKILL.md instructs exactly those operations (search_with_context, search_knowledge, get_directives, export_org_context, etc.). However the registry metadata shown earlier lists no required env/config, while the included skill.json requires an agentdocs_url and api_key. That inconsistency between declared registry requirements and the embedded skill manifest is concerning and should be reconciled.
Instruction Scope
SKILL.md stays within the stated purpose: it directs the agent to load identity context, query directives and knowledge, export org context, and log sessions. Those instructions are appropriate for an access-controlled knowledge connector. The explicit requirement to call log_conversation (audit logging) and to verify identity is consistent with handling sensitive data, but also means queries and results will be transmitted to whatever endpoint you configure — ensure that endpoint is trusted and properly secured.
Install Mechanism
Although the registry indicated 'instruction-only', the included skill.json defines an MCP server command that uses `npx -y @agentdocs1/mcp-server` (npm package). That implies the agent will download and run an npm package at runtime (moderate risk). The package name is not a well-known system package in this report; downloading/executing code via npx introduces additional supply-chain and trust concerns. The README also shows example configuration that will point the runtime to a user-supplied URL.
Credentials
The skill.json requires agentdocs_url and api_key (MCP token), which are expected for a connector to an external UPLO instance and are proportionate to the stated function. However the registry summary above claimed no required envs — an internal inconsistency. Because the API key grants access to potentially highly sensitive defense data, confirm least-privilege scope for the token, verify the target URL is an internal/trusted instance, and ensure the token is not reused elsewhere.
Persistence & Privilege
always:false and no special OS restrictions are present. The skill does not request permanent platform-wide privileges in the manifest. The only persistence element is that the MCP server (npm tool) may be launched to provide the tool endpoints; that behavior is normal for connectors but should be run only against trusted packages and endpoints.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install uplo-defense - After installation, invoke the skill by name or use
/uplo-defense - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
uplo-defense 1.0.0 — Initial Release
- Launches AI-powered defense knowledge management with structured, access-controlled search.
- Supports search across mission documentation, logistics records, personnel data, and ITAR-controlled information.
- Provides core tools: contextual and direct search, directives review, organizational export, audit logging, and outdated document flagging.
- Designed to respect clearance levels, program access, and export control constraints.
- Includes user guidance for identity verification, compliance logging, and workflow examples for common defense scenarios.
Metadata
Frequently Asked Questions
What is Uplo Defense?
AI-powered defense knowledge management. Search mission documentation, logistics records, personnel data, and ITAR-controlled information with structured ext... It is an AI Agent Skill for Claude Code / OpenClaw, with 227 downloads so far.
How do I install Uplo Defense?
Run "/install uplo-defense" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Uplo Defense free?
Yes, Uplo Defense is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Uplo Defense support?
Uplo Defense is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Uplo Defense?
It is built and maintained by RooJenkins (@roojenkins); the current version is v1.0.0.
More Skills