← 返回 Skills 市场
roojenkins

Uplo Legal

作者 RooJenkins · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
245
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install uplo-legal
功能描述
AI-powered legal knowledge management. Search contracts, compliance requirements, legal cases, and policy documents with structured extraction.
安全使用建议
Before installing: (1) Confirm the required configuration (agentdocs_url and api_key) with the skill publisher — the registry listing incorrectly showed no required creds. (2) Verify the destination for the API key is a trusted UPLO instance and limit its scope/ttl. (3) Inspect or vendor-check the npm package @agentdocs1/mcp-server (it will be fetched via npx at runtime); prefer a pinned version/checksum or an audited distribution. (4) Consider restricting use of 'export_org_context' and 'log_conversation' to trusted, audited sessions (these can export sensitive data). (5) Test the skill in a sandboxed environment with non-production credentials first, and ask the publisher to add explicit export safeguards and to correct the published metadata.
功能分析
Type: OpenClaw Skill Name: uplo-legal Version: 1.0.0 The uplo-legal skill bundle is a legitimate integration for the UPLO platform, providing AI-powered legal knowledge management and GraphRAG capabilities. It utilizes the Model Context Protocol (MCP) via a standard npm package (@agentdocs1/mcp-server) to interface with a user-configured UPLO instance. The instructions in SKILL.md and identity-patch.md are well-aligned with the stated purpose of searching contracts and compliance documents, and they include appropriate safeguards such as instructing the agent to cite sources and avoid providing actual legal advice.
能力评估
Purpose & Capability
The name/description (legal knowledge management) matches the toolset and commands (search_knowledge, search_with_context, export_org_context, get_directives). HOWEVER the registry metadata supplied to the scanner lists no required env vars or credentials while skill.json declares two required config items (agentdocs_url and api_key). That mismatch is unexpected and should be resolved — the API key and instance URL are plausible and proportional for this purpose, but their omission from the published metadata is an incoherence.
Instruction Scope
SKILL.md instructs the agent to call mcporter commands to fetch identity context, run searches, export full org context, and log conversations. All of these fall inside a legal-knowledge connector's responsibilities. Still, export_org_context and log_conversation can yield large or sensitive data — the instructions do not place explicit limits on exports or logging destinations. The SKILL.md also assumes an MCP endpoint configured via mcporter; it does not show safeguards for preventing unintended export of confidential data.
Install Mechanism
There is no separate install spec in the registry, but skill.json's mcp block runs 'npx -y @agentdocs1/mcp-server --http' at runtime. That means the agent will fetch and execute an npm package via npx when the MCP is launched. Downloading and running code from npm is a moderate risk (traceable but not pre-reviewed). The package name and origin should be verified; the skill does not embed a reproducible release or pinned checksum.
Credentials
skill.json requires agentdocs_url and api_key (an MCP token) which are appropriate for connecting to an UPLO instance. That is proportionate to the stated purpose. But the public registry metadata omitted these requirements; SKILL.md does not declare or show how secrets are managed. API keys grant access to organizational data and must be scoped/rotated — the skill provides no guidance on least privilege or token scopes.
Persistence & Privilege
The skill is not always: true and does not request system-wide changes. Autonomous invocation is allowed (platform default) but not combined with an 'always' flag or other elevated privileges. There is no evidence it modifies other skills' configs.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install uplo-legal
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /uplo-legal 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of uplo-legal: an AI-powered legal knowledge management skill. - Search organizational contracts, compliance, cases, and policy documents. - Extract structured legal information using dedicated commands. - Fetch organizational context and domain-specific knowledge. - Tools include knowledge search, advanced GraphRAG queries, and context export. - Guidance on session start/end, proper citation, and classification compliance.
元数据
Slug uplo-legal
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Uplo Legal 是什么?

AI-powered legal knowledge management. Search contracts, compliance requirements, legal cases, and policy documents with structured extraction. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 245 次。

如何安装 Uplo Legal?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install uplo-legal」即可一键安装,无需额外配置。

Uplo Legal 是免费的吗?

是的,Uplo Legal 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Uplo Legal 支持哪些平台?

Uplo Legal 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Uplo Legal?

由 RooJenkins(@roojenkins)开发并维护,当前版本 v1.0.0。

💬 留言讨论