by 安全扫描
OpenClaw
可疑
medium confidenceThe skill is low-risk code that generates template proposals locally, but its description overclaims features (live searching Upwork/Fiverr and CSV export) that are not implemented — this mismatch should be understood before use.
评估建议
This package is essentially a local proposal template generator (it writes proposals.md using hard-coded example gigs). If you expected it to automatically search Upwork/Fiverr, post proposals, or export CSVs, those features are not implemented — you'd need to add web-search tooling, API integration, or scraping logic and supply any required credentials. Before installing or running: (1) review and customize the script (portfolio link, pricing, rate logic), (2) be aware it will overwrite proposa...详细分析 ▾
⚠ 用途与能力
Name/description claim the skill "Searches new postings" and outputs MD/CSV for automated gig hunting, but the included code is a local template generator that uses a hard-coded list of example gigs and only writes proposals.md. There is no web search, API integration, scraping logic, CSV export, or any requirement for platform credentials. The requested footprint (no creds, no binaries) does not match the claimed live-search capability.
⚠ 指令范围
SKILL.md instructs the agent to search postings and craft bids, but the runtime artifact (scripts/proposal-gen.py) only accepts a niche argument, synthesizes proposals from hard-coded sample gigs, and writes a local Markdown file. Instructions do not reference reading unrelated files or env vars, but they are vague and grant broader capability than the implementation provides.
✓ 安装机制
No install specification is present (instruction-only with a small local script). Nothing is downloaded or extracted, so there is low install risk.
✓ 凭证需求
The skill requires no environment variables, credentials, or config paths, which is proportional to what the included script actually does. No secrets are requested or accessed.
✓ 持久化与权限
The skill is not forced-always, is user-invocable, and does not request persistent or elevated privileges. It writes proposals.md to the current working directory, which is a modest level of filesystem interaction consistent with its function.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/26
freelance-proposal-bot 1.0.0 - Initial release. - Automatically searches Upwork/Fiverr for new gigs matching your freelance niche. - Analyzes job postings for best fit and generates 5–10 personalized proposals daily. - Crafts custom bids, timelines, and portfolio pitches for each opportunity. - Includes prepared follow-up messages. - Exports proposals in Markdown or CSV for easy copy-paste.
● Pending
安装命令
点击复制官方npx clawhub@latest install freelance-proposal-bot
镜像加速npx clawhub@latest install freelance-proposal-bot --registry https://cn.longxiaskill.com镜像同步中
技能文档
name: freelance-proposal-bot description: Generates personalized proposals for Upwork/Fiverr gigs matching your freelance niche. Searches new postings, analyzes fits, crafts bids/timelines/portfolio pitches. Use for daily gig hunting: input niche like 'logo designer', get 5-10 ready proposals. Includes follow-ups. Outputs MD/CSV for copy-paste.