Confirm the source
Compare the repository, publisher, and installation command before continuing.
✓
Third-party audit
PassedGen Agent Trust Hub
hire-on-upwork · upwork/upwork-agent-plugin
Provider summary
The hire-on-upwork skill guides clients through recruitment workflows on Upwork. It includes specific security instructions for the agent, such as ignoring commands within external text like cover letters and requiring the user to manually click links for binding actions. A low-severity finding is noted for indirect prompt injection surface due to the processing of untrusted participant text.
The provider classified the analyzed snapshot as NONE risk. This result applies to the content available at audit time.
- Provider
- Gen Agent Trust Hub
- Normalized result
- pass
- Risk level
- NONE
- Audited
- Oct 06, 2026
How to use this signal
Read the content
Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.
Limit permissions
Use the narrowest possible scope and avoid broad credentials for third-party skills.