Upwork Automation Gig

Automates searching, proposal generation, lead tracking, and outreach for RPA and automation jobs on Upwork and Fiverr.

Security Scan

The skill claims to automate searching, applying, and messaging on Upwork/Fiverr but provides no install spec, no credentials, and no details about how it will access accounts — these gaps make its behavior unclear and potentially risky.

Purpose & Capability

The skill's stated purpose (automatically search Upwork/Fiverr, generate proposals, apply, track leads, and send outreach) requires account access (logged-in sessions or API tokens), browser automation tooling, and persistent storage for lead tracking. The registry declares no required environment variables, no config paths, and no install artifacts, which is inconsistent with those needs. SKILL.md also includes an npm install command that is not reflected in the registry metadata.

Instruction Scope

Runtime instructions explicitly tell the agent to search Upwork/Fiverr, filter jobs, generate proposals, apply, and send messages, but provide no mechanism (API, OAuth flow, browser automation) or limits. The instructions direct the agent to perform account-level actions (apply/send messages) and to record application status, implying access to user accounts and storage — none of which are documented or constrained. The guidance is vague and grants broad discretion.

Install Mechanism

The registry shows this is instruction-only with no install spec or code files, but SKILL.md suggests running `npx clawhub@latest install upwork-automation-gig`. That is inconsistent: an npx-based install would fetch and execute remote npm code, but no install spec or provenance is provided in the registry. This mismatch increases uncertainty about what code would be run if the user follows the README command.

Credentials

No environment variables, credentials, or config paths are declared, yet the skill needs platform authentication (Upwork/Fiverr account cookies or API tokens) and persistent storage for lead tracking. The absence of any declared credential requirements is disproportionate to the described functionality and suggests missing or undeclared credential handling.

Persistence & Privilege

The skill does not request 'always:true' and uses default autonomous-invocation settings. There is no evidence it modifies other skills or system-wide settings. However, autonomous invocation combined with the ability to send outreach and apply to jobs increases the impact if the skill behaves unexpectedly — consider limiting autonomous permissions.

What to consider before installing

Do not install or enable autonomous actions yet. Ask the publisher for: (1) the source/repository or homepage and code provenance; (2) explicit details on how account authentication is done (OAuth, API keys, or browser automation) and what env vars or tokens are required; (3) an install spec or package URL you can inspect (the README's `npx` line is not present in the registry); (4) how lead data is stored and where; and (5) confirmation that automatic applying/messaging complies with Upwork/Fiverr terms. If you proceed, only grant minimal permissions, test with a disposable account, and monitor all outbound actions/logs.

自動幫你係Upwork同Fiverr接RPA同Automation單既Skill

功能

1. Job Search - 自動search RPA, Automation, Web Scraping, Data Entry相關job
2. Proposal Generation - 分析job後生成專業proposal
3. Lead Tracking - 記錄你apply過既job同status
4. Outreach - 自動send message俾潜在客戶

安裝

npx clawhub@latest install upwork-automation-gig

使用

當用戶話「搵job」既時候：

1. 去Upwork/Fiverr search相關關鍵詞
2. 篩選budget高過$100既job
3. 生成proposal apply

範例

User: 搵RPA job
AI: (自動search同generate proposal)

收費建議

• 基礎proposal生成: $5/job
• 完整automation setup: $300-500/project
• 月費維護: $50-100/月