upwork-apply

SUSPICIOUS: The skill is mostly coherent for scraping and proposal drafting, but it routes Upwork data through a third-party scraping path, forwards content to external services, and relies on opaque local scripts with undisclosed endpoints/auth handling. The access requested is not wildly disproportionate, yet the data-flow integrity and unverified implementation details make this medium risk.