Uplo Logistics

AI-powered logistics knowledge management. Search shipment records, warehouse procedures, fleet data, and customs documentation with structured extraction.

Before installing or enabling this skill: - Resolve the metadata mismatch: ask the publisher why the registry lists no required credentials while skill.json requires agentdocs_url and api_key. - Treat the API key as sensitive: use a token with least privilege and rotate it if you later revoke access. Confirm whether the token can export data and whether export_org_context will produce full org dumps. - Audit the runtime package: confirm the npm package '@agentdocs1/mcp-server' exists, review its source and recent releases, and prefer a pinned version (and ideally a checksum) rather than allowing npx to fetch the latest implicitly. - Consider running the MCP server in an isolated environment (test / staging) first so you can monitor network requests and filesystem activity. - Ask the vendor for documentation describing exactly what data flows out of the MCP server and what 'export_org_context' and 'log_conversation' do (where data is stored/transmitted). - If you need stricter guarantees, request a signed release or host the server yourself rather than relying on npx at runtime. These steps will reduce the risk from dynamic package execution and large-scale data access prompted by the skill's default instructions.

Type: OpenClaw Skill Name: uplo-logistics Version: 1.0.0 The skill bundle is a legitimate integration for the UPLO logistics knowledge management platform. It uses standard MCP patterns, such as 'npx' to execute the '@agentdocs1/mcp-server' and HTTP transport for remote data retrieval from a user-configured UPLO instance. The instructions in SKILL.md and identity-patch.md are strictly aligned with the stated purpose of supply chain and shipment tracking, and no evidence of malicious intent, data exfiltration to unauthorized endpoints, or harmful prompt injection was found.