← 返回 Skills 市场

Freelance Proposal Writer

Name: Freelance Proposal Writer
Author: kevdogg102396-afk

作者 kevdogg102396-afk · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

433

总下载

当前安装

版本数

在 OpenClaw 中安装

/install freelance-proposal-writer

功能描述

Write high-converting freelance proposals from job postings (Upwork, Toptal, Freelancer, etc). Given a job URL or pasted description, analyzes the client's r...

使用说明 (SKILL.md)

\r \r

Freelance Proposal Writer\r

Why This Exists\r

Generic proposals waste connects. This skill crafts targeted proposals that lead with the client's problem, not your resume. 180-220 words that get responses.\r \r

Setup\r

\r Edit the MY_STACK section below to match your skills. This runs once:\r \r

MY_STACK:\r
- Frontend: [your frontend skills]\r
- Backend: [your backend skills]\r
- AI/Automation: [your AI/automation stack]\r
- Rate: [your rate range — e.g., $65-100/hr or project-based]\r
```\r
\r
## Process\r
\r
### Step 1: Extract Job Details\r
\r
From `$ARGUMENTS`:\r
- If URL: use WebSearch or Bash to fetch page content\r
- If pasted text: parse directly\r
\r
Extract:\r
- Client's stated problem (what they're asking for)\r
- Client's real problem (what they actually need — often different)\r
- Budget (hourly vs fixed)\r
- Timeline\r
- Tech stack specified or implied\r
- Client background (company type, size, spend history if visible)\r
\r
### Step 2: Score the Opportunity\r
\r
Quick fit score (skip if \x3C 6/10):\r
- Stack match: /3 (2+ = strong match)\r
- Budget viable: /2 (meets your floor)\r
- Client quality: /2 (some platform history, reasonable expectations)\r
- Problem solvable: /2 (not vague "build me a startup" type requests)\r
- Timeline realistic: /1\r
\r
If score \x3C 6: output `SKIP — [specific reason]` and stop.\r
\r
### Step 3: Identify the Hook\r
\r
The first line is everything. Find the client's most pressing pain:\r
- "You're losing users because [X]"\r
- "The bug you described is caused by [Y], here's the fix"\r
- "I've built exactly this for [similar context] — here's what I learned"\r
\r
Never start with "Hi, I'm [name]" or list your skills first.\r
\r
### Step 4: Write the Proposal\r
\r
Target: 180-220 words. Structure:\r
```\r
[HOOK — 1-2 sentences. Lead with their problem or a direct solution]\r
\r
[SOLUTION — 2-3 sentences. Concrete approach. Specific tech choices + why]\r
\r
[PROOF — 1-2 sentences. Closest relevant thing you've built. No fluff]\r
\r
[TIMELINE & CTA — 1-2 sentences. Realistic estimate + clear next step]\r
```\r
\r
Tone: confident, direct, no buzzwords. Write like texting a peer.\r
\r
**Avoid:** "I am a highly experienced developer", "I would love to help", "I am very passionate about", generic portfolio links without context.\r
\r
### Step 5: Output\r
\r
Produce:\r
1. The fit score with breakdown\r
2. The proposal text (ready to paste)\r
3. One optional follow-up question to add at the end (optional, if it would help)\r
\r
## Example Output Format\r
\r
```\r
FIT SCORE: 8/10\r
- Stack: 3/3 (Next.js + Supabase exact match)\r
- Budget: 2/2 ($75/hr = your minimum)\r
- Client: 2/2 ($5k spend history, US company)\r
- Problem: 2/2 (specific auth bug, clear scope)\r
- Timeline: 1/1 (2-week estimate is realistic)\r
\r
PROPOSAL:\r
[180-220 word proposal here]\r
\r
OPTIONAL QUESTION: "Are you open to a 1-hour paid discovery call to confirm the scope before the full project kicks off?"\r
```\r

安全使用建议

This skill appears to do what it says: parse job postings and write targeted proposals. Before installing, confirm how the platform implements the allowed-tools listed in SKILL.md. 'Bash' and 'Read' let an agent run shell commands and read local files — capabilities that are unnecessary for writing proposals and could expose local files or environment variables if not sandboxed. Ask the publisher (or your platform admin) to: 1) restrict the skill to WebSearch (or specify a safe HTTP fetch tool) and remove Read/Bash unless explicitly needed; 2) clarify where and how 'MY_STACK' is stored and whether the agent will read/write files to persist it; and 3) ensure the platform prevents the skill from accessing host env vars or arbitrary filesystem paths. If you paste job descriptions, avoid including any secrets or authentication tokens in that text.

功能分析

Type: OpenClaw Skill Name: freelance-proposal-writer Version: 1.0.0 The skill requests 'Bash' access and instructs the AI agent to use it (or WebSearch) to fetch page content from a user-provided URL ($ARGUMENTS) in SKILL.md. This combination introduces a significant shell injection vulnerability, potentially leading to Remote Code Execution (RCE) if the agent executes Bash commands with unsanitized input from the user's argument. While the stated purpose is benign, the direct instruction to use Bash with untrusted input constitutes a high-risk flaw, classifying it as suspicious rather than malicious due to the lack of explicit harmful intent.

能力评估

✓ Purpose & Capability

Name, description, and the SKILL.md all focus on parsing job descriptions/URLs and producing tailored proposals. No declared env vars, binaries, or install steps are requested, which aligns with an instruction-only text-processing skill.

⚠ Instruction Scope

The runtime instructions ask the agent to fetch job pages via 'WebSearch or Bash'. Allowing Bash and Read gives the agent the ability to execute arbitrary shell commands and read local files — actions not required for composing a proposal and which could expose local data. The 'MY_STACK' snippet instructs the user to edit their stack but does not specify where that is stored or how the agent will access it, creating ambiguity about whether the agent will write/read files or persist data.

✓ Install Mechanism

No install spec and no code files — the skill is instruction-only. That minimizes disk writes and code-execution risk from third-party downloads.

ℹ Credentials

The skill declares no environment variables or credentials, which is appropriate. However, because the instructions permit Bash/Read, an agent with those tools could access environment variables or files on the host if platform tooling maps those capabilities directly — this is a platform/tooling concern rather than something the SKILL.md explicitly requests.

✓ Persistence & Privilege

always is false and there are no instructions to modify other skills or system-wide settings. The skill does not request permanent presence or elevated platform privileges in its manifest.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install freelance-proposal-writer
安装完成后，直接呼叫该 Skill 的名称或使用 /freelance-proposal-writer 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

- Initial release of Freelance Proposal Writer. - Writes 180-220 word targeted freelance proposals from job postings or URLs, focusing on leading with client’s pain points and solutions. - Analyzes job details (problem, budget, tech stack, timeline, client quality) and assigns a fit score; skips poor matches automatically. - Proposal structure: problem hook, concrete solution, relevant proof, and timeline/CTA. - Outputs fit score breakdown, proposal text, and optional follow-up question. - Customizable skill stack; supports Upwork, Toptal, Freelancer, etc.

元数据

Slug freelance-proposal-writer

版本 1.0.0

许可证 —

累计安装 2

当前安装数 2

历史版本数 1

常见问题