← 返回 Skills 市场
Up Bank
作者
Ashley Jackson
· GitHub ↗
· v1.0.0
· MIT-0
98
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install upbank
功能描述
Read-only access to Up Bank accounts, transactions, categories, and tags
安全使用建议
This skill appears internally consistent for read-only Up Bank access, but note the publisher/source is listed as unknown and there is no homepage — you cannot verify the author from the package metadata. Before installing: (1) prefer providing the UP_API_TOKEN only at runtime (or use a short-lived token) instead of storing it globally in your shell profile; (2) restrict the token's scope and revoke it if you stop using the skill; (3) require the skill to ask for explicit approval before each API call (the SKILL.md says JIT approval is required); and (4) if you want stricter limits, disable autonomous invocation for this skill so it cannot run without you initiating it.
功能分析
Type: OpenClaw Skill
Name: upbank
Version: 1.0.0
The skill bundle contains only metadata and documentation (SKILL.md, README.md) for interacting with the Up Bank API. It explicitly defines a read-only scope, mandates Just-In-Time (JIT) user approval for all API calls, and includes defensive instructions for the agent to handle tokens securely and respect rate limits. No executable code or malicious prompt injection attempts were identified.
能力标签
能力评估
Purpose & Capability
Name/description (read-only Up Bank access) match the declared requirement (UP_API_TOKEN) and the listed endpoints. No unrelated binaries, services, or credentials are requested.
Instruction Scope
SKILL.md describes only read-only API calls and explicitly requires JIT approval per request and not storing tokens. Minor inconsistency to note: the doc asks for JIT approval yet also instructs users to set UP_API_TOKEN as an environment variable—setting the env var is fine for a short-lived session but persistent global ENV storage would contradict the stated 'do not store tokens permanently' guidance.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest-risk install profile (nothing is downloaded or written to disk by the skill itself).
Credentials
Only a single credential (UP_API_TOKEN) is required, which is appropriate for the stated read-only API functionality. No other sensitive env vars or unrelated credentials are requested.
Persistence & Privilege
Skill is not always-enabled and uses default autonomous invocation settings. Nothing requests elevated or system-wide persistence; SKILL.md discourages permanent token storage.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install upbank - 安装完成后，直接呼叫该 Skill 的名称或使用
/upbank触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release: Read-only access to Up Bank account data.
- View accounts, transactions, categories, tags, and attachments (all endpoints are read-only)
- Personal Access Token (`UP_API_TOKEN`) required for authentication
- JIT (just-in-time) and timely user authentication enforced for security
- Handles API rate limits, error scenarios, and token expiration
- Provides guidance on monetary values, pagination, and privacy best practices
- No write actions supported; strictly read-only access
元数据
常见问题
Up Bank 是什么？
Read-only access to Up Bank accounts, transactions, categories, and tags. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 98 次。
如何安装 Up Bank？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install upbank」即可一键安装，无需额外配置。
Up Bank 是免费的吗？
是的，Up Bank 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Up Bank 支持哪些平台？
Up Bank 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Up Bank？
由 Ashley Jackson（@ashleyjackson）开发并维护，当前版本 v1.0.0。
推荐 Skills