Freelance Pilot

• Risk level: Low
• Analyzed: Feb 14, 2026, 5:42 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's code, instructions, and requested resources are consistent with a local bid-calculator / proposal-drafting tool; no unexpected network access or unrelated credentials are requested.

This skill appears to do what it says: a local Node.js CLI that calculates bids, scans job text for simple 'red flags', and outputs proposal templates. Before installing or running it: 1) Ensure you have Node.js installed (SKILL.md implies Node but the registry metadata omitted this requirement). 2) Inspect config.json (or config.example.json) and remove any sensitive data before use. 3) Run the script in a sandboxed environment the first time (or review the index.js file — it’s short and contains no network calls). 4) If you add the INTEGRATION.md snippet to your agent’s SOUL.md, be aware it instructs the agent to always run the skill when evaluating job posts; that is an explicit behavioral change you should approve. Overall the package is coherent and low-risk, but always review bundled scripts before executing them in production environments.