write-proposal

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads Upwork job postings and client descriptions, which contain outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates a job application and proposal submission workflow on Upwork (manage_proposals with actions create and confirm_preview, spending virtual platform currency "Connects" and setting monetary bid amounts). This constitutes a direct financial/commercial operation (purchasing/bidding for job slots and submitting proposals). The workflow documents explicit access controls: it requires an authenticated Upwork freelancer or agency account (compatibility: Requires the Upwork MCP server with toolset version 1.0 or later and an authenticated Upwork freelancer or agency account), explicit user confirmation steps before submission (Get explicit confirmation before the first write-capable call, Get a separate explicit approval to submit), and platform-enforced authentication/authorization through the Upwork MCP server.