Freelance Proposal Engine

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill mostly matches its proposal-writing purpose, but it grants broad shell and local file tools that are not needed for drafting freelance proposals.

This appears to be an instruction-only proposal drafting helper and does not include code or install steps. Before installing, consider limiting or removing the unnecessary Bash and file-writing/search permissions, and only provide job-listing files or URLs you intend the agent to read.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used incautiously, the agent could have access to run local commands or inspect/write files while performing a task that should usually only require reading a listing and producing text.

Why it was flagged

A proposal-writing skill may need to read a user-supplied file or fetch a listing URL, but this grants shell execution and broad filesystem write/search capabilities without instructions that scope or justify those tools.

Skill content
allowed-tools: Read, Write, Grep, Glob, Bash, WebFetch, WebSearch
Recommendation

Remove Bash, Write, Grep, and Glob unless there is a specific, documented need; otherwise instruct the agent to use only Read for explicit user-provided files and WebFetch/WebSearch for explicit listing URLs.