upwork-cli

upwork-cli is a skill for Claude Code, Codex from adbertram/cli-tools. It costs 84 tokens per session (1,266 once invoked), scanned A, original, MIT.

Use this skill for service operations only. DO NOT use this skill for CLI implementation lifecycle work such as creating, testing, updating, troubleshooting, validating, removing, or documenting the CLI tool itself; delegate those tasks to cli-tool-expert. MANDATORY: Execute Upwork operations using the upwork CLI…

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Install with agentmods
npx agentmods add skills/adbertram/cli-tools/upwork-cli
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add adbertram/cli-tools --skill upwork-cli
Clone the repo
git clone --depth 1 https://github.com/adbertram/cli-tools

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for upwork-cli

README.md
[![agentmods](https://agentmods.dev/badge/skills/adbertram/cli-tools/upwork-cli/github.svg)](https://agentmods.dev/skills/adbertram/cli-tools/upwork-cli)
Your own site
<a href="https://agentmods.dev/skills/adbertram/cli-tools/upwork-cli"><img src="https://agentmods.dev/badge/skills/adbertram/cli-tools/upwork-cli/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for upwork-cli

Your own site · 80×15
<a href="https://agentmods.dev/skills/adbertram/cli-tools/upwork-cli"><img src="https://agentmods.dev/badge/skills/adbertram/cli-tools/upwork-cli.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 84 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,266 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00084 $0.01266
Opus 5.5 $0.00034 $0.00506
Sonnet 5.5 $0.00017 $0.00253
Haiku 4.5 $0.00008 $0.00127

Measured today against content hash 5477260c1d65, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

upwork-cli scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

_repo/skills/_disabled/upwork-cli/SKILL.md · 79 lines

How it starts

The opening of the file, as written. The whole thing — 79 lines — stays where its author put it; the contents beside it link to each section on GitHub.

<quick_start> The upwork CLI follows this pattern:

upwork <command-group> <action> [arguments] [options]
Task Command
Authenticate (all creds) upwork auth login
Authenticate OAuth API only upwork auth login --credential-type oauth_authorization_code
Check auth upwork auth status
Search jobs (GraphQL API) upwork jobs list --filter "query:eq:python" --limit 20
Filter jobs by skills, sort upwork jobs list --filter "skills:eq:python|automation" --sort recency
Get one job posting upwork jobs get <id-or-ciphertext>
List supported profile fields upwork profile list --table
Read profile attributes Disabled: upwork profile get returns a Cloudflare/non-headed automation error
Show one field definition upwork profile get bio
Preview a profile update upwork profile update --dry-run --set title="..."
Apply a profile update Disabled: upwork profile update --yes ... returns a Cloudflare/non-headed automation error
</quick_start>

<essential_principles> MANDATORY: Verify the live command shape before executing ANY upwork command. Consult usage.json when the repo or installed package ships it. If usage.json is absent, use upwork --help, the relevant subcommand --help, and README.md instead. Never guess at command syntax.

  • The CLI uses the shared cli_tools_shared.BrowserAutomation CDP/browser-harness backend with a persistent profile, stealth launch flags, and navigator.webdriver masking.
  • Do not tell agents to set HEADLESS=false, launch local Chrome/CDP, or use Computer Use when Adam says not to use a headed browser or not to interrupt him.
  • Non-interrupting options are: reuse the authenticated saved browser profile, clear stale CLI cache and retry once, use an internal/API or authenticated in-page fetch path if the CLI already exposes one, connect only to an already-running approved CDP endpoint, or run the headed/CDP handoff on a remote/non-watched browser host.
  • Real system Chrome over CDP is the known avoidance surface for managed Cloudflare challenges, but local real Chrome is a GUI action and requires explicit current approval.
  • Never solve, click through, refresh around, or pay a service to solve a human-verification challenge. If the Cloudflare/Turnstile challenge persists on all allowed non-interrupting paths, report the blocker and the browser surface that needs approval.

</essential_principles>

Read the full file on GitHub · 79 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today First seen · 79 lines · 84 tokens per session scan A 5477260c1d65

Subscribe to this mod's changes

upwork-cli is a skill published in the GitHub repository adbertram/cli-tools (6 stars, last pushed today), licensed MIT. It adds 84 tokens to every session and 1,266 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-11-07.

Related

upwork-cli compared with skills from other repositories

upwork-cli next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
upwork-cliadbertram/cli-toolsSkill6todayMITA84Claude Code, Codex
opencli-autofixjackwener/OpenCLISkill31kyesterdayApache-2.0A61Claude Code
surfnicobailon/surf-cliSkill684yesterdayMITA53Claude Code, Codex
rdc-cliBANANASJIM/rdc-cliSkill19314d agoMITA82Claude Code, Codex
pixiv-cli-ciFlanChanXwO/pixiv-cliSkill132yesterdayMITA61Codex
acrawl-mcpMingye-Lu/AgenticCrawlerSkill15yesterdayMITA200Claude Code, Codex
debug-hubrexleimo/aiosSkill62yesterdayMITB66Claude Code, Codex