← Back to Skills Marketplace
Uplo Github
by
RooJenkins
· GitHub ↗
· v1.0.0
· MIT-0
122
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install uplo-github
Description
AI-powered GitHub knowledge management. Search repository metadata, code review standards, issue tracking, and team workflows with structured extraction.
Usage Guidance
Before installing or enabling: (1) confirm the required configuration (agentdocs_url and api_key) — the package metadata incorrectly listed no env vars; (2) only point the skill at an UPLO instance you control or fully trust, because repository contents, issues, PR text and CODEOWNERS will be sent there; (3) be aware the skill expects to run an MCP server via npx (@agentdocs1/mcp-server) which will download/execute code at runtime — prefer a vetted/pinned package or run it in a restricted environment; (4) limit the API key scope if possible and get organizational approval for sharing repository metadata with the configured service; (5) if you need higher assurance, ask the publisher for a signed release URL, package checksum, or an install spec that avoids implicit npx downloads.
Capability Analysis
Type: OpenClaw Skill
Name: uplo-github
Version: 1.0.0
The uplo-github skill bundle is a GitHub knowledge management tool designed to interface with the UPLO platform. It uses the @agentdocs1/mcp-server package via npx to provide tools for searching repository metadata, CODEOWNERS, and issue history. The SKILL.md and identity-patch.md files contain instructions that align with the stated purpose and include explicit defensive directives, such as instructing the agent to never surface access tokens or deployment credentials regardless of clearance. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.
Capability Assessment
Purpose & Capability
The skill claims to provide org-wide GitHub knowledge and the included skill.json/config (agentdocs_url + api_key) describes connecting to an external UPLO MCP server to perform searches — this is coherent. However, the registry metadata at the top of the submission claimed 'Required env vars: none' while skill.json requires an instance URL and API key, which is an inconsistency in the package metadata.
Instruction Scope
SKILL.md instructs only to call UPLO-related operations (get_identity_context, search_knowledge, search_with_context, etc.) and does not direct the agent to read unrelated local files or arbitrary environment variables. It does, however, imply the agent will send repository metadata, issues, PR text, and other org data to the configured UPLO instance — expected for this type of skill but a potentially sensitive data flow that should be authorised.
Install Mechanism
The skill package itself has no install spec, yet README and skill.json indicate runtime behavior that uses npx to start an MCP server ("npx -y @agentdocs1/mcp-server --http"). That implies dynamic download/execution of an npm package at runtime (moderate risk). The package source (@agentdocs1/mcp-server) is referenced but no pinned release URL or checksum is provided. This remote install/exec behavior is not fully declared in the top-level metadata and increases risk.
Credentials
skill.json requires agentdocs_url and api_key (API token) which are proportional to the purpose (the service needs credentials to receive and index GitHub data). However the submitted registry metadata incorrectly listed 'none' for required env vars; that mismatch could mislead users. The API key has access to potentially broad organizational data on the UPLO instance, so only provide it to a trusted instance and with least privilege.
Persistence & Privilege
The skill does not request always:true, does not ask to modify other skills or system-wide config, and has normal autonomous-invocation defaults. There is no evidence it demands system-level persistence or escalated privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install uplo-github - After installation, invoke the skill by name or use
/uplo-github - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of uplo-github: AI-powered GitHub knowledge management.
- Search repository metadata, code review standards, issue tracking, and team workflows with structured queries.
- Provides organization-aware access, supporting workflows like onboarding, dependency investigation, and ownership lookups.
- Key tools include search_knowledge, search_with_context, get_directives, and flag_outdated for comprehensive querying and metadata management.
- Offers historical and cross-repo insights not easily accessible via native GitHub search.
- Includes tips for making effective use of CODEOWNERS, team data, and discussion histories.
Metadata
Frequently Asked Questions
What is Uplo Github?
AI-powered GitHub knowledge management. Search repository metadata, code review standards, issue tracking, and team workflows with structured extraction. It is an AI Agent Skill for Claude Code / OpenClaw, with 122 downloads so far.
How do I install Uplo Github?
Run "/install uplo-github" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Uplo Github free?
Yes, Uplo Github is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Uplo Github support?
Uplo Github is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Uplo Github?
It is built and maintained by RooJenkins (@roojenkins); the current version is v1.0.0.
More Skills