Security audit
Security checks for vulnerabilities and agentic risk
This skill performs a disclosed PowPow registration and optional subscription flow, with sensitive but purpose-aligned handling of account data and temporary session state.
Install only if you are comfortable letting the agent create a PowPow account for you, submit your registration details to global.powpow.online, and temporarily hold a session token while it completes login or optional subscription steps. Run the cleanup step when finished, and complete any Alipay or PayPal payment yourself in the official checkout page.
Referenced artifact was not completely inspected
- Script principal `scripts/powpow-register.mjs`: **cero dependencias**, requiere **Node ≥ 18**. Antes de empezar, ejecuta una vez `node scripts/powpow-register
Referenced artifact was not completely inspected
- Script principal `scripts/powpow-register.mjs`: **cero dependencias**, requiere **Node ≥ 18**. Antes de empezar, ejecuta una vez `node scripts/powpow-register
Referenced artifact was not completely inspected
- Script principal `scripts/powpow-register.mjs`: **cero dependencias**, requiere **Node ≥ 18**. Antes de empezar, ejecuta una vez `node scripts/powpow-register
Referenced artifact was not completely inspected
- Script principal `scripts/powpow-register.mjs`: **cero dependencias**, requiere **Node ≥ 18**. Antes de empezar, ejecuta una vez `node scripts/powpow-register
Referenced artifact was not completely inspected
- Script principal `scripts/powpow-register.mjs`: **cero dependencias**, requiere **Node ≥ 18**. Antes de empezar, ejecuta una vez `node scripts/powpow-register
Referenced artifact was not completely inspected
- Script principal `scripts/powpow-register.mjs`: **cero dependencias**, requiere **Node ≥ 18**. Antes de empezar, ejecuta una vez `node scripts/powpow-register
Referenced artifact was not completely inspected
- Script principal `scripts/powpow-register.mjs`: **cero dependencias**, requiere **Node ≥ 18**. Antes de empezar, ejecuta una vez `node scripts/powpow-register
Referenced artifact was not completely inspected
- Script principal `scripts/powpow-register.mjs`: **cero dependencias**, requiere **Node ≥ 18**. Antes de empezar, ejecuta una vez `node scripts/powpow-register
Referenced artifact was not completely inspected
- Script principal `scripts/powpow-register.mjs`: **cero dependencias**, requiere **Node ≥ 18**. Antes de empezar, ejecuta una vez `node scripts/powpow-register
Referenced artifact was not completely inspected
- Script principal `scripts/powpow-register.mjs`: **cero dependencias**, requiere **Node ≥ 18**. Antes de empezar, ejecuta una vez `node scripts/powpow-register
Referenced artifact was not completely inspected
- Script principal `scripts/powpow-register.mjs`: **cero dependencias**, requiere **Node ≥ 18**. Antes de empezar, ejecuta una vez `node scripts/powpow-register
Todo el contenido visible del skill está redactado en español y no indica que el usuario pueda elegir otro idioma ni que el skill esté limitado a una región hispanohablante. Según la política indicada, forzar un idioma concreto sin opt-in o justificación clara constituye una violación de política lingüística.
The skill clearly instructs the agent to use environment variables and make network requests to an external service, but it does not declare an explicit tool/permission scope. That creates a governance gap: an agent runtime may grant broader capabilities than reviewers or users expect, making sensitive registration data handling less transparent and harder to constrain.
The skill collects and transmits personal data including email, username, optional phone number, and avatar to a third-party service, but the description does not provide a clear upfront disclosure or consent checkpoint before data transfer. This is dangerous because users may not realize the agent is acting as an intermediary and sending their personal information off-platform.
La sección de UX fija el tono de servicio habitual de PowPow y redacta instrucciones enteramente en español, sin ofrecer alternativa de idioma ni indicar que el usuario puede elegir lengua. Según la política, forzar un idioma o locale sin opt-in explícito constituye una violación de política lingüística.
The manifest explicitly sets the skill language to "es", while the rest of the listing includes mixed-language content and no indication that users can opt into another language or that the skill is region-specific. This is a natural-language locale constraint that may violate policy when imposed without user choice or clear justification.
SQP-3 applies to all file types and covers language or locale policy violations. This file mandates a specific language presentation for the skill instructions and references mixed fixed-language user-facing text, but does not state that the skill is region-specific or that users can opt into their preferred language.
This markdown file contains user-facing guidance that requires specific Chinese-language messages as part of the workflow, but it does not indicate that the user can choose another language or that the skill is limited to Chinese-speaking contexts. Under the locale policy, forcing a specific language without opt-in is a natural-language policy concern.
The troubleshooting section repeatedly instructs users to match exact Chinese error strings, which effectively assumes a fixed UI language. Because the file is otherwise written in Spanish and does not state that the platform or skill is intentionally Chinese-only, this creates a language policy issue.
La frase "según haga falta en tiempo de ejecución" y el criterio "si el usuario no tiene ni idea... o necesita ver" no delimitan con precisión cuándo debe activarse el envío de imágenes. Esta redacción puede solaparse con muchas situaciones conversacionales comunes y provocar invocaciones no deseadas o inconsistentes.
The script persists the live session token to a predictable file in the system temporary directory (powpow-register-state.json). Although it uses mode 0o600, temporary directories are commonly accessible to local processes running as the same user, and the token is later turned into a one-click login URL, so theft of the file can enable account session hijacking until cleanup or token expiry. In this skill context, the risk is elevated because the agent is explicitly handling account registration and payment flows, making the stored token capable of accessing subscription and account actions.
After re-authentication, the refreshed session token is again saved to the same local state file without an explicit runtime warning. This extends the window during which a valid authenticated token exists on disk, increasing exposure to local compromise or accidental leakage; because the token represents an updated post-payment session, it may grant broader access to an active subscription account.
Todo el contenido instructivo fuerza un único idioma para la operación de la habilidad y no ofrece opt-in ni alternativa de idioma. Según la política indicada, imponer un idioma sin elección del usuario puede constituir una violación de política lingüística.
El término "Apertura" es ambiguo porque no especifica si se refiere al inicio de cualquier conversación, a una demo guiada o a una consulta concreta del usuario. Sin restricciones adicionales, puede hacer que la habilidad envíe imágenes en contextos demasiado amplios.