← 返回 Skills 市场
Uplo Engineering
作者
RooJenkins
· GitHub ↗
· v1.0.0
· MIT-0
149
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install uplo-engineering
功能描述
AI-powered engineering knowledge management. Search architecture docs, API specs, incident reports, runbooks, and infrastructure documentation with structure...
安全使用建议
Before installing: 1) Note the registry metadata is inconsistent — the skill actually requires a UPLO instance URL and an API key (check skill.json/README). 2) The skill will run an MCP server via 'npx @agentdocs1/mcp-server' which downloads and executes code from npm — review that package's source and trustworthiness before allowing it to run. 3) The provided API key will allow the skill to read and log org documentation and incident reports — ensure the key is scoped with least privilege, audited, and used in a staging environment first. 4) Confirm privacy/retention policies for the UPLO instance (what gets logged/sent back to the vendor). 5) If you cannot verify the npm package or vendor, request a self-hostable or audited binary, or ask the publisher for a homepage/source repo and provenance. 6) If you proceed, start with a limited-access test account and monitor network/process activity and UPLO logs.
功能分析
Type: OpenClaw Skill
Name: uplo-engineering
Version: 1.0.0
The skill provides tools for deep retrieval of sensitive engineering data, including architecture designs, incident reports, and potentially production secrets, which are identified as high-risk capabilities. While these functions are aligned with the stated purpose of engineering knowledge management and no clear malicious intent was found, the broad access to internal documentation and the use of an external MCP server (@agentdocs1/mcp-server) meet the criteria for a suspicious classification due to the inherent risk of the capabilities provided.
能力评估
Purpose & Capability
The skill's functionality (searching org docs via a UPLO MCP server) matches its name and description. However the registry metadata claims 'no required env vars / credentials', while skill.json and README clearly require a UPLO instance URL and an API key. That mismatch is incoherent and could mislead users about what secrets the skill needs.
Instruction Scope
SKILL.md instructs the agent to call MCP tools (search_with_context, search_knowledge, export_org_context, get_directives, log_conversation, etc.). These are in-scope for an engineering knowledge tool, but they will cause the agent to transmit queries and potentially sensitive document contents to the configured UPLO instance. The instructions do not attempt to read unrelated local files or other system secrets, but they do direct the agent to surface identity/context (get_identity_context) which may include access/clearance info.
Install Mechanism
Although the package is instruction-only in the registry summary, skill.json and the README expect the platform to run an MCP server via 'npx -y @agentdocs1/mcp-server --http'. That means code will be pulled from npm and executed at runtime (npx) — a moderate-risk install pattern. The npm package '@agentdocs1/mcp-server' is not a known, audited vendor here; downloading and running it automatically is a potential supply-chain risk and should be reviewed before use.
Credentials
The skill legitimately needs an 'agentdocs_url' and an 'api_key' to contact your UPLO instance and access your org's documents; this is proportionate to the purpose. The concern is the earlier registry metadata that reported no required credentials — that inconsistency is misleading. Also, the api_key will grant access to potentially very sensitive org data, so it should be scoped and protected (least privilege).
Persistence & Privilege
The skill does not request persistent 'always' inclusion and does not declare system-wide config changes. Its MCP server runs as a tool process (mcp block) and autonomous model invocation is allowed by default (not flagged here). There is no indication the skill modifies other skills or system-wide settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install uplo-engineering - 安装完成后，直接呼叫该 Skill 的名称或使用
/uplo-engineering触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of uplo-engineering: AI-powered engineering knowledge management.
- Consolidates architecture docs, API specs, incident reports, runbooks, and infrastructure documentation into a unified, searchable knowledge layer.
- Provides tools for advanced search, fast retrieval, and organization-wide context export.
- Supports engineering workflows such as RFC research, onboarding, "code archaeology," incident review, and technical debt investigation.
- Includes features for flagging outdated documentation and reporting knowledge gaps to manage operational risk.
- Optimized for precise queries using service/repository names and document identifiers (ADR, RFC).
元数据
常见问题
Uplo Engineering 是什么？
AI-powered engineering knowledge management. Search architecture docs, API specs, incident reports, runbooks, and infrastructure documentation with structure... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 149 次。
如何安装 Uplo Engineering？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install uplo-engineering」即可一键安装，无需额外配置。
Uplo Engineering 是免费的吗？
是的，Uplo Engineering 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Uplo Engineering 支持哪些平台？
Uplo Engineering 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Uplo Engineering？
由 RooJenkins（@roojenkins）开发并维护，当前版本 v1.0.0。
推荐 Skills