Security audit
Security checks for vulnerabilities and agentic risk
This skill coherently automates PowPow account registration and optional subscription setup, with sensitive handling that is disclosed and mostly scoped to that purpose.
Install only if you intend the agent to help create a PowPow account and possibly start an optional subscription flow. Treat generated passwords and one-click login links as private credentials, review any payment page before completing payment, and run cleanup when finished.
Referenced artifact was not completely inspected
- মূল স্ক্রিপ্ট `scripts/powpow-register.mjs`: **জিরো-ডিপেন্ডেন্সি**, **Node ≥ 18** লাগে। শুরু করার আগে একবার `node scripts/powpow-register.mjs status` চালিয়ে
Referenced artifact was not completely inspected
- মূল স্ক্রিপ্ট `scripts/powpow-register.mjs`: **জিরো-ডিপেন্ডেন্সি**, **Node ≥ 18** লাগে। শুরু করার আগে একবার `node scripts/powpow-register.mjs status` চালিয়ে
Referenced artifact was not completely inspected
- মূল স্ক্রিপ্ট `scripts/powpow-register.mjs`: **জিরো-ডিপেন্ডেন্সি**, **Node ≥ 18** লাগে। শুরু করার আগে একবার `node scripts/powpow-register.mjs status` চালিয়ে
Referenced artifact was not completely inspected
- মূল স্ক্রিপ্ট `scripts/powpow-register.mjs`: **জিরো-ডিপেন্ডেন্সি**, **Node ≥ 18** লাগে। শুরু করার আগে একবার `node scripts/powpow-register.mjs status` চালিয়ে
Referenced artifact was not completely inspected
- মূল স্ক্রিপ্ট `scripts/powpow-register.mjs`: **জিরো-ডিপেন্ডেন্সি**, **Node ≥ 18** লাগে। শুরু করার আগে একবার `node scripts/powpow-register.mjs status` চালিয়ে
Referenced artifact was not completely inspected
- মূল স্ক্রিপ্ট `scripts/powpow-register.mjs`: **জিরো-ডিপেন্ডেন্সি**, **Node ≥ 18** লাগে। শুরু করার আগে একবার `node scripts/powpow-register.mjs status` চালিয়ে
Referenced artifact was not completely inspected
- মূল স্ক্রিপ্ট `scripts/powpow-register.mjs`: **জিরো-ডিপেন্ডেন্সি**, **Node ≥ 18** লাগে। শুরু করার আগে একবার `node scripts/powpow-register.mjs status` চালিয়ে
Referenced artifact was not completely inspected
- মূল স্ক্রিপ্ট `scripts/powpow-register.mjs`: **জিরো-ডিপেন্ডেন্সি**, **Node ≥ 18** লাগে। শুরু করার আগে একবার `node scripts/powpow-register.mjs status` চালিয়ে
Referenced artifact was not completely inspected
- মূল স্ক্রিপ্ট `scripts/powpow-register.mjs`: **জিরো-ডিপেন্ডেন্সি**, **Node ≥ 18** লাগে। শুরু করার আগে একবার `node scripts/powpow-register.mjs status` চালিয়ে
Referenced artifact was not completely inspected
- মূল স্ক্রিপ্ট `scripts/powpow-register.mjs`: **জিরো-ডিপেন্ডেন্সি**, **Node ≥ 18** লাগে। শুরু করার আগে একবার `node scripts/powpow-register.mjs status` চালিয়ে
Referenced artifact was not completely inspected
- মূল স্ক্রিপ্ট `scripts/powpow-register.mjs`: **জিরো-ডিপেন্ডেন্সি**, **Node ≥ 18** লাগে। শুরু করার আগে একবার `node scripts/powpow-register.mjs status` চালিয়ে
The README states that SKILL.md contains 'ভাষার নিয়ম' (language rules), and the document itself is entirely in Bangla with no indication that users may choose another language. This suggests a fixed language/locale requirement, which can violate policy when no user opt-in or alternative is offered.
The skill directs the agent to generate and send one-click login links that appear to function as bearer authentication artifacts, yet it does not instruct the agent to treat them as secrets, warn the user not to forward them, or constrain their lifetime and scope. If such a link is exposed in chat history, logs, previews, or to the wrong recipient, anyone holding it could gain account access without the password.
The file sets a required conversational tone and wording in Bangla, and the overall skill content is written as if that language is mandatory. There is no indication that the user may choose another language or that the skill is limited to a specific locale for compliance or regional reasons, which creates a language-policy issue.
The manifest keywords are broad and marketing-oriented, which can cause the skill to trigger for loosely related user requests without clear scope boundaries. In this context, the risk is elevated because the notes describe agent-driven handling of registration, verification-code submission, ordering, and optional payment flows, so overbroad discovery or activation could funnel users into sensitive account or transaction workflows they did not explicitly intend.
The skill instructions are primarily in Bengali but include user-facing error strings and guidance in Chinese, such as Node 版本过低 and 用户名已存在, without stating that the skill is intended only for multilingual users or a specific locale. This can impose a language/locale constraint on users without opt-in.
This file contains operational instructions and user-facing phrasing in specific languages, but does not state that the skill is limited to Bangla/Chinese-speaking users or provide any opt-in or language selection. That can violate language/locale policy because it effectively forces a language context on users without choice.
The document states that mobile numbers must be mainland China numbers matching the 1[3-9] 11-digit pattern. For a file describing a global.powpow.online registration flow, this is a locale-specific constraint presented as a hard rule without user opt-in or an explicit justification that the skill is region-specific.
The file’s operational instructions are entirely in Bengali, and it also includes Chinese UI text examples, but nowhere indicates that language should match the user's preference or that use of this language is optional. This can conflict with a language/locale policy requiring user choice or explicit justification for a fixed locale.
The file instructs the agent to send screenshots whenever they seem useful, using broad triggers like when a user wants to know what the product 'looks like.' In an agent setting, ambiguous invocation rules can cause unsolicited file sharing, over-disclosure, or sending externally hosted content without clear user consent or necessity.
This code file contains natural-language instructions, errors, and usage output exclusively in Chinese, including the main help text and operational prompts. Under the stated policy, forcing a specific language without opt-in is a natural-language policy violation because users are not offered any locale or language choice.
The manifest presents user-facing content in Bengali while the notes field is written in Chinese, which indicates inconsistent language expectations. This can violate language/locale policy when a specific language is imposed or mixed without offering user choice or documenting a justified regional constraint.
This markdown file describes a workflow that opens a payment page file using platform commands like start, open, or xdg-open. Although the payment purpose is described, there is no explicit warning in this step that the action will launch an external browser/local file and temporarily move the user out of the conversation context.
The documentation at L010 states a limited set of fields saved to the state file. However, later code stores extra values such as codeSentAt, userId, provider, package, amount, subscriptionId, approveUrl, planName, planPrice, orderCreatedAt, and refreshedAt in saveState calls, so the stated persistence scope is inaccurate.