Upwork Proposal Generator

Automatically analyze Upwork job posts and create personalized, professional proposals including intro, past cases, pricing, and deadlines.

Security Scan

The skill's instructions and requirements are consistent with an Upwork proposal generator; it asks for no credentials and contains no unexpected file or env access, but the README's npx install hint (not reflected in registry install metadata) is worth noting before running external installers.

Purpose & Capability

Name/description (generate proposals from Upwork job posts) matches the SKILL.md instructions (analyze job text/link and produce a tailored proposal with intro, past cases, pricing, deadline). The skill requests no unrelated binaries, env vars, or config paths.

Instruction Scope

Runtime instructions are narrowly scoped to analyzing a job post (link or text) and producing a proposal up to 300 words with specified components. The SKILL.md does not instruct the agent to read unrelated files, environment variables, or system paths.

Install Mechanism

Registry metadata contains no install spec and the package is instruction-only, but SKILL.md includes a user-facing command 'npx clawhub@latest install upwork-proposal-generator'. That suggests running code fetched from the npm ecosystem (clawhub) which is not validated here. This is not inherently malicious but is an unverified external installer instruction and deserves caution.

Credentials

No environment variables, credentials, or config paths are required. The skill's needs are minimal and proportional to its stated functionality.

Persistence & Privilege

Flags show no forced always-on behavior and the skill does not request elevated persistence or system-wide config changes.

Assessment

This skill appears to do what it says (analyze a job post and write a proposal) and doesn't request credentials. Two cautions before installing/using: 1) SKILL.md suggests running an 'npx clawhub@latest ...' command — running npx will fetch and execute code from npm (verify the package and its publisher first). 2) If you paste private Upwork links or other sensitive content, the agent or any code it invokes could access that content; avoid sharing secrets. If you want higher assurance, ask the publisher/source of the skill for a verified install method or source code, or prefer installing only from known registry install specs.

自動幫你分析Upwork job post同埋生成專業proposal

安裝

npx clawhub@latest install upwork-proposal-generator

使用

當用戶send job post link或者文字既時候：

1. 分析job既需求、技能、預算、deadline
2. 生成100%原創proposal (最多300字)
3. 包含：自我介紹 + 過去案例 + 點解你最啱 + 報價 + 交期

範例

User: https://www.upwork.com/jobs/123456

AI 分析同生成proposal...

輸出格式

• 專業但親切
• 唔好用模板語言
• 针对具体job黎寫