Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed PowPow account-registration and optional checkout assistant, with sensitive steps scoped to the official service and temporary local state.
Install only if you want an agent to help create a PowPow account. Expect to provide an email, password or generated password, verification code, and optionally an avatar file. For paid upgrades, verify the official PowPow, Alipay, or PayPal destination before completing payment, and run cleanup when finished so the temporary session state is removed.
Referenced artifact was not completely inspected
- Kernskript `scripts/powpow-register.mjs`: **null Abhängigkeiten**, benötigt **Node ≥ 18**. Vor dem Start einmal `node scripts/powpow-register.mjs status` ausf
Referenced artifact was not completely inspected
- Kernskript `scripts/powpow-register.mjs`: **null Abhängigkeiten**, benötigt **Node ≥ 18**. Vor dem Start einmal `node scripts/powpow-register.mjs status` ausf
Referenced artifact was not completely inspected
- Kernskript `scripts/powpow-register.mjs`: **null Abhängigkeiten**, benötigt **Node ≥ 18**. Vor dem Start einmal `node scripts/powpow-register.mjs status` ausf
Referenced artifact was not completely inspected
- Kernskript `scripts/powpow-register.mjs`: **null Abhängigkeiten**, benötigt **Node ≥ 18**. Vor dem Start einmal `node scripts/powpow-register.mjs status` ausf
Referenced artifact was not completely inspected
- Kernskript `scripts/powpow-register.mjs`: **null Abhängigkeiten**, benötigt **Node ≥ 18**. Vor dem Start einmal `node scripts/powpow-register.mjs status` ausf
Referenced artifact was not completely inspected
- Kernskript `scripts/powpow-register.mjs`: **null Abhängigkeiten**, benötigt **Node ≥ 18**. Vor dem Start einmal `node scripts/powpow-register.mjs status` ausf
Referenced artifact was not completely inspected
- Kernskript `scripts/powpow-register.mjs`: **null Abhängigkeiten**, benötigt **Node ≥ 18**. Vor dem Start einmal `node scripts/powpow-register.mjs status` ausf
Referenced artifact was not completely inspected
- Kernskript `scripts/powpow-register.mjs`: **null Abhängigkeiten**, benötigt **Node ≥ 18**. Vor dem Start einmal `node scripts/powpow-register.mjs status` ausf
Referenced artifact was not completely inspected
- Kernskript `scripts/powpow-register.mjs`: **null Abhängigkeiten**, benötigt **Node ≥ 18**. Vor dem Start einmal `node scripts/powpow-register.mjs status` ausf
Referenced artifact was not completely inspected
- Kernskript `scripts/powpow-register.mjs`: **null Abhängigkeiten**, benötigt **Node ≥ 18**. Vor dem Start einmal `node scripts/powpow-register.mjs status` ausf
Referenced artifact was not completely inspected
- Kernskript `scripts/powpow-register.mjs`: **null Abhängigkeiten**, benötigt **Node ≥ 18**. Vor dem Start einmal `node scripts/powpow-register.mjs status` ausf
The README is entirely written as a German-only instruction and workflow description, with no indication that users can choose another language or that the skill is intentionally limited to German-speaking users for a documented reason. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
The description includes the trigger phrase "hilf mir, ein powpow-Konto anzulegen". Although it contains the product name, the activation wording is still broad help-seeking language and the file does not provide clear exclusion guidance for similar conversational requests beyond a few examples, which could increase unintended invocation risk.
The skill explicitly instructs the agent to invoke OS-level commands (start, open, xdg-open) to launch a locally returned payment page. Even though the stated purpose is limited to opening checkout for the user, this broadens the skill from web/API orchestration into host-command execution, which is a meaningful increase in capability and attack surface if the returned path or invocation context is ever influenced unexpectedly.
The skill tells the agent to open payment pages via local system commands but does not require a clear user-facing warning or explicit consent immediately before launching a browser/application. That can surprise users, trigger unwanted local side effects, and normalize agent-initiated application launches for financial flows, which is particularly sensitive in a payment context.
The manifest explicitly sets the skill language to "de", while the rest of the listing includes Chinese text and gives no indication that German is optional or required for a region-specific purpose. This creates a natural-language locale constraint without user opt-in or justification, which matches the language/locale policy violation category.
These lines explicitly require maintaining the existing tone and workflow language, while the file itself is fully German-language. There is no indication that the user can opt into another language or choose locale, which can violate language/locale policy for a general-purpose skill.
This file imposes a specific language/locale presentation on users and operators through its natural-language instructions and quoted interface text. Under the policy, forcing a language without opt-in or documented justification is a natural-language policy violation.
Line L03 says to use the screenshots "Bei Bedarf" and whenever users do not know Bubble or want to see the result, which leaves activation scope open-ended and subjective. The file does not define clear boundaries, explicit trigger phrases, or negative examples to distinguish when the skill should send screenshots versus when it should not.
The quick-access section hardcodes German user-facing phrases and interaction examples, and the document provides no indication that the language should adapt to the user's preference. This can violate a language/locale policy if the skill is expected to respect user-selected language rather than forcing German by default.
The documentation explicitly limits what is saved in the temporary state file. However, later saveState calls persist several extra fields beyond that list, so the comment materially understates what local state is retained.
The top-level description frames the experience as a simple in-chat registration flow where the user only supplies basic details and retrieves a code once. However, the same file later documents materially broader behavior around creating orders, opening external payment checkout, and tracking payment completion, which contradicts the simplified claim about what the user interaction entails.
Line L004 states the script has no dependencies, while L080 specifies using platform-specific external commands (start, open, xdg-open) as part of the execution flow. This is a documentation-level contradiction because the file presents the script as dependency-free while relying on external system facilities outside Node itself.
This markdown file is primarily written in German, but line L28 presents a mandatory user-facing message in Chinese. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale restriction is explicitly justified, which this file does not do.
Lines L71-L84 enumerate many expected platform errors exclusively via Chinese message text, while the rest of the file is German. This suggests a fixed-language experience without explicit opt-in or documentation that the skill is limited to a Chinese-localized platform, which falls under the locale-policy check.