Security audit
Security checks for vulnerabilities and agentic risk
This is a localized guidance-only PowPow registration helper that does not run code, collect credentials, or handle payments itself.
Install this only if you want Bhojpuri-language help registering for PowPow. Payments should be completed directly on PowPow/PayPal/WeChat/Huawei pages, and the agent should not ask you for passwords, verification codes, or payment credentials.
The skill description and usage guidance are written entirely in Bhojpuri/Hindi-script with no indication that other languages are supported or that this locale restriction is intentional for a region-specific audience. This can violate language/locale policy because users are not given an opt-in or alternative language path.
The documentation is entirely in Bhojpuri/Hindi and does not provide a language choice, translation, or a clear locale restriction. This can cause operators or reviewers to misunderstand payment and activation flows, increasing the chance of misuse, support errors, and missed security-relevant details such as manual payment confirmation and the instruction not to collect payment credentials.
This file presents all operational instructions and user-facing guidance in a specific language, but does not state that the skill is region-specific or that users can choose another language. That can violate language/locale policy when the skill effectively forces one language without opt-in.
The file’s operational instructions are entirely in a specific language/locale, which can effectively force that language on maintainers or operators. The policy allows locale constraints only when they are explicitly justified or when users are given a choice, neither of which appears here.
No suspicious patterns detected.
