Upwork Automation Using Ai
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could fill real proposal fields in your Upwork account, so a mistaken action could affect your professional workflow even though the default is draft-only.
The skill directs browser actions that can affect an Upwork account, including preparing an application, but it also clearly requires explicit user approval before final submission.
Open job detail and click Apply. ... Fill proposal fields completely. ... Stop before submission unless user explicitly says submit.
Review the selected job and all filled proposal fields before giving any explicit 'submit now' instruction.
Using the skill may temporarily give the agent access to your Upwork login session or user-provided credentials.
The skill may handle Upwork or Google login credentials/session access, which is sensitive, but the artifacts limit use to the active run and prohibit persistence.
fill email/password only from user-provided credentials for this run ... Never persist credentials to skill files or notes; use credentials only for the active run.
Prefer logging in manually or through an existing trusted browser session when possible, do not share reusable passwords unnecessarily, and verify that no credentials are echoed or stored.