Neckr0ik Freelance Automator
v1.0.0Automate freelance workflows — find jobs, write proposals, deliver work. Supports Upwork, Fiverr, Freelancer, PeoplePerHour. Use when you want to run a freel...
⭐ 0· 241·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The SKILL.md advertises full support for Upwork, Fiverr, Freelancer, PeoplePerHour (job search, proposals, delivery, messaging, invoice sending). The code, however, generates local example jobs (placeholder) and primarily targets 'freelancer' in generated data; there is no platform API integration, no authentication/credential handling, and no implementation shown for messaging/invoicing. The claimed capabilities exceed the implemented functionality.
Instruction Scope
Runtime instructions and examples assume a CLI named 'neckr0ik-freelance-automator' and features like sending invoices and automating messaging. The provided script writes files under ~/.freelance-automator and calls external tools (subprocess.run calling 'ollama'). The SKILL.md does not document these file writes or the dependency on ollama, giving the agent broad unspecified filesystem and tooling interactions.
Install Mechanism
There is no install spec (instruction-only), but the package includes a Python script that expects to be runnable. The script invokes the 'ollama' CLI to generate proposals; the skill declares no required binaries or install steps for ollama or any wrapper/CLI. That mismatch (uses an external binary without declaring it) is a coherence and deployment risk.
Credentials
requires.env is empty but the code's platform metadata marks platforms as 'requires_auth': True. No credentials, API tokens, or guidance are requested or stored in the SKILL.md or metadata. Additionally, using ollama implies a local model/runtime requirement not reflected in declared env or binaries. The lack of declared credentials or auth flow is disproportionate to the claimed platform actions (posting bids, messaging, sending invoices).
Persistence & Privilege
The script creates and writes to ~/.freelance-automator (config, jobs, proposals, clients). It does not request always:true nor attempt to change other skills or system-wide settings. Writing to a hidden directory in the user's home is expected for this type of tool, but users should be aware data (jobs, proposals, client info) will be stored locally.
What to consider before installing
This skill contains mismatches between what it promises and what the code actually does. Before installing or running it: (1) ask the author to document required binaries (it calls the 'ollama' CLI) and provide installation instructions or a proper CLI entrypoint; (2) confirm how platform authentication works (Upwork/Fiverr/etc. claim to be supported but no auth flow or API usage is shown); (3) be aware the script will create ~/.freelance-automator and store jobs/proposals/clients there—inspect that directory after first run; (4) do not provide platform credentials or emails until the skill documents how it uses them and where data is transmitted; (5) if you intend to run it, run in a sandbox or review the rest of the truncated code (invoice/messaging implementations) to ensure there is no unexpected network exfiltration or sending of credentials. If the developer can provide an updated SKILL.md that declares required binaries, explicit auth flows, and actual platform integration, the assessment could change.Like a lobster shell, security has layers — review code before you run it.
latestvk976t949b8yhr7bgnv6jf2tgw182c5bj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.