Upwork Automation Gig

• Analyzed: May 12, 2026, 4:22 AM
• Findings: 1
• Version: 1.0.0
• Hash: 0ddb00b5b9aaa09085b0f5ed34962f14625c9cb1bcd9247f5aa405525518b8f2
• Source: palm
• External report: View on VirusTotal

Findings (1)

The `SKILL.md` describes an automation skill with broad capabilities, including network access for job searching on Upwork/Fiverr, generating and applying proposals, and sending messages to potential clients. While these actions are aligned with the stated purpose, they involve significant interaction with external services and user accounts, representing a high-risk attack surface. There is no explicit evidence of malicious intent (e.g., data exfiltration, backdoor installation, or harmful prompt injection) in the provided files, but the extensive permissions and account automation capabilities warrant a 'suspicious' classification due to the potential for misuse by the underlying, unprovided code.