Real Skill packageSource verifiedClawHub registry

uupt-delivery

UU跑腿同城配送服务。支持帮我送、帮我取、帮我买、帮我办等多种服务，覆盖订单询价、发单下单、查询订单、取消订单、跑男实时追踪。当用户要真实发起同城配送或代办交易时使用：「同城配送」「同城急送」「同城快送」「同城跑腿」「跑腿」「发单」「帮送/帮取/帮买」「代购」「代取号」「代排队」「陪诊」「取寄快递」「送文件」「送钥匙」「送花」「送蛋糕」「取东西」「取快递」「取文件」「去XX取」「帮我买」「买奶茶」「买咖啡」「买药」「买饭」「买烟」「搬东西」「装卸」「小时工」「打扫卫生」「布置场地」「琐事代办」等。

Identity and source

Publisher attributionuupt-mcpregistry owner unverified by skillvetai
Functional categoryAwaiting category reviewreview pending · 0% rule confidence
Package forminstruction with code16 recorded files
Canonical sourceClawHub registryclawhub:uupt-mcp:uupt-delivery
Open canonical source ↗

Platform declarations

These states come from the source or distribution context. None of the entries below are SkillVetAI compatibility test results.

OpenClawnative officialProvenance: registry distribution

Independent structural checks

These checks parse the fixed package against dated platform rules. They do not execute the Skill or verify task behavior.

Claude Codepasses structure
Checker 0.1.0 · agent-skills-2026-08-13+claude-code-docs-2026-08-13 · 8/18/2026.claude/skills/uupt-delivery

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

OpenAI Codexpasses structure
Checker 0.1.0 · agent-skills-2026-08-13+codex-docs-2026-08-13 · 8/18/2026.agents/skills/uupt-delivery

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

OpenClawpasses structure
Checker 0.1.0 · agent-skills-2026-08-13+openclaw-docs-2026-08-13 · 8/18/2026skills/uupt-delivery

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

Installation and inspection

This command is recorded from the source ecosystem and resolves the registry's latest release. The fixed release shown on this page should be inspected before adoption.

clawhub install @uupt-mcp/uupt-delivery
clawhub inspect @uupt-mcp/uupt-delivery --version 1.0.18

Security evidence

SkillVetAI static result: no findings detected

This automated, non-executing scan is bound to this release hash. It is not a safety certification and may contain false positives or false negatives.

Status
completed
Coverage
full text content
Files
16 / 16 inspected as text
Checked
8/18/2026, 9:52:24 AM
Scanner
0.1.3
Policy
1.0.3
6 inferred permission indicators
  • shell execution — automatically inferred
  • network access — automatically inferred
  • filesystem read — automatically inferred
  • filesystem write — automatically inferred
  • credential access — automatically inferred
  • external write action — automatically inferred
12 dependency and API indicators
  • npm: adm-zip ^0.6.0
  • npm: axios ^1.19.0
  • pypi: requests >=2.28.0
  • api: api-open.uupt.com
  • api: api.qrserver.com
  • api: clawhub.ai
  • api: github.com
  • api: httpbin.org
  • api: ipinfo.io
  • api: open.uupt.com
  • api: otherfiles.uupt.com
  • api: registry.npmmirror.com
External clawhub result: suspicious

This is registry-supplied evidence for the recorded release, not an independent SkillVetAI scan. Check the canonical source for the full report, scanner versions, scope, and current moderation state.

Evidence checked
8/18/2026, 8:48:25 AM
Release binding
Matches this record
  • skillspector: suspicious
  • llm: suspicious

Recorded files

The catalog stores hashes and an inventory summary for change detection. It does not republish the package contents.

Package content hashsha256:3acdf02d4b41efb2cb5f0fddadadbb27009ab8d00c6aaa3095e1ee2c4c708b8c
Show up to 16 recorded paths
  • config.example.json
  • defaults.json
  • index.js
  • package-lock.json
  • package.json
  • requirements.txt
  • scripts/cancel-order.js
  • scripts/create-order.js
  • scripts/driver-track.js
  • scripts/order-detail.js
  • scripts/order-price.js
  • scripts/register.js
  • scripts/self-update.js
  • skill-card.md
  • SKILL.md
  • uupt_delivery.py

Source changelog

- 简化和精炼 skill 描述与触发关键词，聚焦在“帮我送/取/买/办”等高频同城服务场景。 - 移除了开发者模式（appId/appSecret/openId 配置）说明，改为仅通过手机号注册授权，提升易用性。 - 操作流程全部围绕手机号验证码注册，去除了多余注册分支。 - 精简场景介绍与表述，保留主要服务分类与下单参数说明，无细分实现/参数层级说明。 - 删除 skill-card.md 文件（原功能介绍卡片）。 - 其他内容保持功能和命令格式一致，仅精简表述，便于理解和操作。

Release security diff

highCompared fixed releases 1.0.17 and 1.0.18; 0 finding and 6 permission indicators were added.

Both fixed releases were scanned under the current scanner and policy, so finding, permission and dependency changes are available.

Permission escalation detected
Change reasons and limitations
  • new sensitive permission
  • credential and domain expansion
  • permission surface changed
  • dependency surface changed
  • file surface changed
  • content hash changed

Observed release history

These older immutable releases were observed by prior successful syncs. They remain recorded when a newer release becomes current.

1.0.178/18/2026sha256:f07799756adb0e16810a3985f286f2d392407eb4ab5eb8d6d0e8b7a764a7e5cd