AI-powered skill that generates, analyzes, and optimizes personalized freelance proposal drafts for higher client conversion rates.

This package appears non-malicious but sloppy/unfinished: it claims 'AI' capabilities and instructs you to add an apiKey/config, yet the code only does local template substitution and doesn't read that config or call any external service. Also several metadata fields are inconsistent (package name/version vs tests and clawhub.json), which suggests the author copied templates and didn't finish validation. Before installing or providing any credentials: 1) Ask the publisher for the canonical source (Git URL or npm package name) and confirm whether an external AI/LLM service is actually used. 2) Do not paste API keys or secrets into config files unless you confirm the code needs them and the network endpoints are trustworthy. 3) If you test locally, inspect package.json for install scripts and run the CLI in a sandbox or VM first. 4) Consider forking and fixing the metadata/tests or wait for a published, reconciled release from a known author. If you need an actual AI-backed proposal generator, prefer a package that clearly documents and shows network/LLM usage and reviews its privacy/credentials handling.

Type: OpenClaw Skill Name: freelance-proposal-writer-lvjunjie Version: 1.0.1 The skill bundle is a legitimate CLI tool for generating freelance job proposals using local templates and basic text analysis. Analysis of 'index.js' shows no evidence of data exfiltration, malicious execution, or unauthorized access; it primarily handles string manipulation and local file saving via the '--save' flag. The 'SKILL.md' and 'README.md' files contain standard instructions for an AI agent without any prompt-injection attacks or hidden malicious commands.