UpKuaJing Company and People Search

Official skill for upkuajing (跨境魔方). Find companies (找公司) and global people (找人) data. Get business registration, background info, and contact details (Email...

This package appears to be a straightforward client for the UpKuaJing API. Before installing, consider: 1) The skill will store your API key under ~/.upkuajing/.env if you use the built-in key creation — keep that file secure or set the key via environment variables instead. 2) The scripts make network calls to the API (normal) and also perform a daily version check to the provider (/api/skills/version) which writes a small cache file under ~/.upkuajing — if you are concerned about telemetry, review or disable that code. 3) The SKILL.md asks the agent to obtain explicit user confirmation before running any operation that incurs fees; the actual scripts will run when invoked, so ensure you (or your agent) follow that confirmation step to avoid unexpected charges. 4) Review legal/privacy implications of bulk contact/personnel lookups for your jurisdiction. 5) The registry/source homepage is not authoritative here — if this skill will be used with sensitive accounts or in production, verify the publisher and API endpoints with the official UpKuaJing developer documentation.

Type: OpenClaw Skill Name: upkuajing-company-people-search Version: 1.0.6 The skill bundle provides a legitimate interface for the UpKuaJing (跨境魔方) business and people search API. It includes scripts for searching entities, retrieving contact details, and managing account balance. Security practices are observed, such as validating task IDs using UUID checks to prevent path traversal in `common.py` and requiring explicit user confirmation for fee-incurring API calls in `SKILL.md`. A version check mechanism in `version_check.py` notifies users of updates via standard error without auto-execution. No evidence of data exfiltration, malicious execution, or prompt injection was found.