UpKuaJing Customs Trade Company Search

Official skill for upkuajing (跨境魔方). Find companies (找公司) and global buyers using customs trade data. Get trade order details, business contact info, and lea...

This skill appears to be what it claims: a Python client for the UpKuaJing Open Platform. Before installing, ensure you trust the UpKuaJing service and are comfortable providing an API key. Note that: - The skill will store your API key in ~/.upkuajing/.env (or read it from the UPKUAJING_API_KEY environment variable). Keep that file protected. - API calls are billed; the scripts enforce confirming operations that incur fees, but you should verify pricing on the provider site and confirm before bulk queries or batch contact fetches. - The code performs a daily version check by POSTing to the provider's /api/skills/version endpoint and writes a small cache file in ~/.upkuajing; if you prefer no remote checks, you can disable or modify that behavior in scripts/version_check.py. - Optional logging can record request/response JSON into ~/.upkuajing/logs if ENABLE_API_LOGGING is set to True in common.py (it defaults to False). If you need higher assurance, run the scripts in a controlled environment and inspect network traffic to confirm calls go only to openapi.upkuajing.com.

Type: OpenClaw Skill Name: upkuajing-trade-company-search Version: 1.0.6 The skill bundle provides a legitimate interface for searching global trade and company data via the UpKuaJing (跨境魔方) Open Platform API. The scripts (scripts/*.py) implement standard API interaction patterns, including authentication via an API key stored in ~/.upkuajing/.env, cursor-based pagination for large datasets, and local task logging. Security measures are present, such as UUID validation and path normalization in common.py to prevent path traversal during task management. The SKILL.md instructions correctly guide the AI agent on handling fee-based operations and API key setup without any evidence of prompt injection or malicious intent. All network activity is directed to the official domain (openapi.upkuajing.com).