← 返回 Skills 市场
Uplo Media
作者
RooJenkins
· GitHub ↗
· v1.0.0
· MIT-0
149
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install uplo-media
功能描述
AI-powered media knowledge management. Search content production records, licensing agreements, distribution data, and audience analytics with structured ext...
安全使用建议
This skill appears to do what it says (media rights/production knowledge queries) but there are several things to verify before installing: 1) Confirm the skill's source and publisher—there's no homepage or authoritative source listed in the registry; verify 'UPLO' identity and the npm package '@agentdocs1/mcp-server' are legitimate. 2) Prefer using a scoped, least-privilege API key for your UPLO/MCP instance and confirm acceptable data access/retention policies (who can read exported org context and logged conversations). 3) Understand that the agent will run 'npx @agentdocs1/mcp-server' (fetching and executing code from npm at runtime); if you cannot verify the package, avoid installing or run in an isolated/staging environment. 4) Ask the publisher for an explicit privacy/data-retention statement and the exact npm package checksums or a link to a canonical release (GitHub release or company domain) to validate the runtime artifact. If you cannot validate the package/publisher or limit the API key scope, treat this skill as risky and do not install in production.
功能分析
Type: OpenClaw Skill
Name: uplo-media
Version: 1.0.0
The skill facilitates media industry knowledge management but includes high-risk capabilities such as 'export_org_context' for broad organizational data extraction and 'npx' for executing a remote package (@agentdocs1/mcp-server) in skill.json. While these tools are aligned with the stated purpose of managing complex media rights and production data, the combination of broad data access and remote code execution via a generic-looking npm scope meets the threshold for a suspicious classification. Additionally, SKILL.md contains instructions for the agent to automatically execute multiple tools at the start of a session, which increases the risk of unauthorized data exposure if the agent is misconfigured.
能力评估
Purpose & Capability
Name, README, SKILL.md, and identity-patch all describe a media knowledge-management integration and the listed MCP tools (search_knowledge, search_with_context, get_directives, export_org_context, etc.) are coherent with that purpose. The skill requests access to an UPLO/MCP endpoint and API key in skill.json, which is appropriate for a connector to a hosted knowledge service.
Instruction Scope
Runtime instructions in SKILL.md are narrowly scoped to querying the organization's knowledge base and related directives (search_* calls, get_directives, log_conversation, propose_update, report_knowledge_gap). These actions align with the stated purpose but do involve reading and logging potentially sensitive org data (rights, contracts, talent compensation). The guidance to 'log_conversation' and 'export_org_context' are useful but increase the sensitivity of data that may be captured; the skill does not provide details about retention, export destinations, or access controls.
Install Mechanism
The skill has no formal install spec in the package registry summary, but skill.json / README instructs running an MCP server via 'npx -y @agentdocs1/mcp-server --http'. That means the agent will fetch and execute an npm package at runtime. Fetching and running a remote npm package is a moderate-to-high risk behavior unless the package and publisher are verified. There is no published homepage or authoritative source in the registry metadata to validate the package.
Credentials
skill.json declares two required config values: agentdocs_url (your UPLO instance URL) and api_key (MCP token). Those credentials are proportional to the skill's functionality. However the registry metadata earlier stated 'no required env vars'—an inconsistency. Also, the skill's workflows (export_org_context, log_conversation) imply access to broad organizational data; ensure the API key can be scoped minimally and that organization policies permit this access.
Persistence & Privilege
The skill is not forced-always (always:false) and is user-invocable (normal). It does declare an MCP server command that the agent may run to provide tools — this creates a local HTTP transport and effectively runs external code at runtime, but it does not request permanent platform-wide privileges or config changes. Autonomous invocation plus the provided API key would let the skill access org data when invoked; treat the API key as sensitive.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install uplo-media - 安装完成后，直接呼叫该 Skill 的名称或使用
/uplo-media触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of uplo-media: AI-powered knowledge management for media industry documentation.
- Provides structured search across production records, licensing agreements, distribution data, and audience analytics.
- Supports workflows such as rights checks, production budget reconciliation, talent availability, and performance analysis.
- Includes key tools: search_with_context, search_knowledge, get_directives, propose_update, and report_knowledge_gap.
- Offers actionable tips for searching media documentation and managing time-sensitive rights data.
- Designed to answer complex media industry questions and streamline content operations.
元数据
常见问题
Uplo Media 是什么？
AI-powered media knowledge management. Search content production records, licensing agreements, distribution data, and audience analytics with structured ext... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 149 次。
如何安装 Uplo Media？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install uplo-media」即可一键安装，无需额外配置。
Uplo Media 是免费的吗？
是的，Uplo Media 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Uplo Media 支持哪些平台？
Uplo Media 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Uplo Media？
由 RooJenkins（@roojenkins）开发并维护，当前版本 v1.0.0。
推荐 Skills