← 返回 Skills 市场
Uplo Banking
作者
RooJenkins
· GitHub ↗
· v1.0.0
· MIT-0
234
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install uplo-banking
功能描述
AI-powered banking knowledge management. Search KYC records, regulatory reports, risk assessments, and loan processing documentation with structured extraction.
安全使用建议
Before installing or enabling this skill: (1) Verify the source and homepage — skill.json cites UPLO but registry metadata lacks a homepage; ask the publisher for a canonical source. (2) Confirm the required config: agentdocs_url and api_key are needed (contradiction with registry metadata). Only provide an API key that is scoped to the minimum necessary permissions, ideally read-only and time-limited, and ensure audit logs are enabled. (3) Review the npm package @agentdocs1/mcp-server (author, version, source repo) before allowing the agent to run npx and fetch code. Prefer pinned versions rather than '-y' dynamic fetches. (4) Be cautious about commands that export_org_context or log_conversation — these can contain highly sensitive PII and SAR-related material; restrict who can invoke them and consider testing in an isolated environment first. (5) If you cannot confirm the publisher or scope of the API key, do not install or provide credentials. If you want higher assurance, ask the publisher for a signed package, official documentation/homepage, and a minimal-scope service account for testing.
功能分析
Type: OpenClaw Skill
Name: uplo-banking
Version: 1.0.0
The uplo-banking skill bundle is a legitimate integration for the UPLO platform, designed for managing banking-related knowledge such as KYC/AML and regulatory documentation. It utilizes a standard Model Context Protocol (MCP) setup to interact with a remote server (@agentdocs1/mcp-server) using user-provided API keys. The instructions in SKILL.md and identity-patch.md are well-aligned with the stated purpose and include specific directives to maintain regulatory compliance and respect data classification tiers, with no evidence of malicious intent, data exfiltration, or harmful prompt injection.
能力评估
Purpose & Capability
The skill is clearly a UPLO/UPLO-like connector for banking knowledge (KYC/AML, regulatory records). That purpose legitimately requires an instance URL and an API key to talk to the UPLO MCP server — which appear in skill.json and README. However the registry metadata provided earlier claimed no required env/config/credentials; that is inconsistent with the included skill.json and README. Confirm which metadata is authoritative before trusting the skill.
Instruction Scope
SKILL.md instructs the agent to call mcporter commands (e.g., search_knowledge, search_with_context, export_org_context, log_conversation). Those commands are coherent with the stated purpose. Two operational notes: (1) SKILL.md assumes a local MCP/mcporter tool is available but the registry metadata did not declare required binaries — clarify this dependency; (2) the skill exposes actions that can export full organizational context and log conversations back to the MCP, which is expected for this connector but carries high sensitivity for KYC/SAR data and should be limited and audited.
Install Mechanism
There is no explicit install spec in the registry, which reduces disk-write risk, but skill.json includes an MCP launch command using 'npx -y @agentdocs1/mcp-server --http'. That means when the agent runs, it may fetch and execute an npm package at runtime. Downloading and executing code from npm is a moderate-risk install mechanism — verify the package name and publisher, prefer pinned versions, and review the package source before allowing execution.
Credentials
The skill requires a UPLO instance URL and an API key (skill.json config), which are proportionate to a knowledge-base connector. However, the API key grants access to extremely sensitive banking data (KYC, SARs, examinations). Ensure the provided API key is scoped to least privilege, time-limited if possible, and audited. Also resolve the discrepancy where registry metadata lists no required credentials.
Persistence & Privilege
The skill does not request always:true or other elevated persistent privileges, and there is no indication it modifies other skills or system-wide settings. Normal autonomous invocation is allowed (platform default).
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install uplo-banking - 安装完成后,直接呼叫该 Skill 的名称或使用
/uplo-banking触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
uplo-banking v1.0.0
- Initial release of AI-powered banking knowledge management.
- Enables searching KYC records, regulatory reports, risk assessments, and loan documentation with structured extraction.
- Provides clear command set for searching knowledge, fetching organizational context, and exporting directives.
- Supports compliance with classification, accurate sourcing, and transparency when information is unavailable.
元数据
常见问题
Uplo Banking 是什么?
AI-powered banking knowledge management. Search KYC records, regulatory reports, risk assessments, and loan processing documentation with structured extraction. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 234 次。
如何安装 Uplo Banking?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install uplo-banking」即可一键安装,无需额外配置。
Uplo Banking 是免费的吗?
是的,Uplo Banking 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Uplo Banking 支持哪些平台?
Uplo Banking 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Uplo Banking?
由 RooJenkins(@roojenkins)开发并维护,当前版本 v1.0.0。
推荐 Skills