Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
HunterAI: Auto-Apply & Win Upwork Jobs
v1.0.0Automates finding, qualifying, and bidding on Upwork jobs with tailored proposals, tracking applications, and learning from successful interviews and hires.
⭐ 0· 78·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
Name/description promise ('Auto-Apply' and 'bidding on Upwork jobs') implies submitting proposals on Upwork, but the skill requests no Upwork credentials, contains no network/API/browser automation, and the SKILL.md explicitly says the agent 'generates realistic Upwork job listings' (a simulation). The capability to actually send proposals to Upwork is missing; this is a substantive mismatch that could mislead users.
Instruction Scope
Runtime instructions ask the agent to read and write local workspace files (assets/*.md and .upwork/APPLICATION_LOG.md) and to run the provided pre-apply-check.sh. That scope is self-contained and consistent with drafting/learning locally, but the SKILL.md's trigger matrix and README language strongly suggest full automation (searching Upwork and submitting bids). There are no instructions to access external endpoints or credentials; if the intent is live submission, the instructions are incomplete and ambiguous.
Install Mechanism
This is an instruction-only skill with a local bash script; there is no install spec, no external downloads, and no third-party packages. Low installation risk.
Credentials
The skill requires no environment variables or credentials. That is consistent with a local drafting tool, but inconsistent with the 'auto-apply' claim: a genuine auto-apply feature would need Upwork credentials or browser automation and possibly other secrets. The absence of any required creds is a red flag about what the skill actually does versus what it advertises.
Persistence & Privilege
The skill runs on demand (always:false), reads and writes only its own workspace files (.upwork/ and assets/), and does not request system-wide changes or access to other skills' configs. No elevated persistence or cross-skill modification observed.
What to consider before installing
This skill appears to be a local proposal authoring and learning assistant, not a true Upwork autobidder. Before installing: (1) Decide whether you expect automatic submission to Upwork — if so, this skill does not implement that and would need Upwork API/browser automation and credentials. (2) Review and sanitize assets/FREELANCER_PROFILE.md and PROPOSAL_VAULT.md because the agent will read and write those files (they may contain sensitive identity or client details). (3) If you plan to add auto-submission yourself, understand you'll need to supply Upwork credentials or an RPA/bot connector and audit that code carefully. (4) Confirm that automating submissions doesn't violate Upwork terms of service for your account. (5) If you install and run, test in a safe sandbox and verify that the agent only drafts proposals locally and does not attempt any unexpected network calls. If you need exact Upwork integration, ask the author for details on how/where submissions occur and for evidence of secure credential handling.Like a lobster shell, security has layers — review code before you run it.
auto-bidvk974hjpknstb5w5jr8f176rmmx83e4z7freelance-growthvk974hjpknstb5w5jr8f176rmmx83e4z7latestvk974hjpknstb5w5jr8f176rmmx83e4z7lead-genvk974hjpknstb5w5jr8f176rmmx83e4z7revenue-aivk974hjpknstb5w5jr8f176rmmx83e4z7upwork-automationvk974hjpknstb5w5jr8f176rmmx83e4z7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.