hire-on-upwork

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow monitors and consumes proposals, messages, and candidate applications via Upwork tools where outsider freelancers submit free text such as cover letters.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill guides an Upwork client through finding candidates, reviewing proposals, messaging, scheduling, inviting freelancers, and preparing contract drafts (manage_offers action create_draft), but explicitly states that any action moving money or binding a party finishes on Upwork via a finalize_url (status: action_required), leaving funding, sending, and money-moving to the external platform interface rather than executing direct financial operations itself. This constitutes an indirect financial operation (preparing contracts/offers for downstream handling).