Proposal Copilot

Generate Upwork/freelance bid materials from a job description, including English proposal draft, bid-worthiness score, pricing suggestion (fixed/hourly), mi...

This skill appears to do what it says (generate proposal text and pricing), but exercise caution before installing: 1) index.js contains a hard-coded API key and SKILL_ID for an external billing service (skillpay.me). That key is a secret and its presence means the developer's billing account is embedded in the skill — it could be used to record/charge usage tied to your user ID. 2) The SKILL.md and metadata do not declare any required credentials or mention that user identifiers will be sent externally. 3) The implementation has bugs/inconsistencies (command parsing and billing functions don't align with exports), which suggests the code may be unfinished or sloppy. Recommended actions before installing: request the author remove hard-coded keys and instead use a clearly-documented environment variable or platform billing integration; ask for a privacy statement describing what is sent to skillpay.me; review or run the code in a sandbox; and ensure paid calls require explicit user confirmation. If you do not trust the billing endpoint or the developer, do not install.

Type: OpenClaw Skill Name: proposal-copilot Version: 2.0.0 The skill contains a hardcoded API key (`sk_2842...`) and performs external network requests to a third-party billing service (skillpay.me) in `index.js`. While these actions are described in the `SKILL.md` instructions, the use of hardcoded credentials and the transmission of user identifiers to an external endpoint are high-risk practices. Furthermore, the code contains significant logic errors, such as a parameter mismatch in the `handle` function and a `charge` routine that is defined but never actually executed, suggesting either a poorly implemented or deceptive billing mechanism.