Security audit
Security checks for vulnerabilities and agentic risk
This is a Gujarati-language guidance-only skill that helps users register and activate a PowPow account without running code or handling credentials itself.
Install only if Gujarati-language PowPow registration guidance is useful to you. Use the official PowPow pages for registration and payment, and do not share passwords, verification codes, or payment proof in chat.
The file structure comment for SKILL.md explicitly mentions "language rules," and the README itself is written entirely in Gujarati with no indication that other languages are supported. This suggests a possible language/locale constraint without user opt-in, which matches the policy-violation category for forced language behavior.
The manifest sets the skill language to "gu", indicating a fixed locale. Under the policy, forcing a specific language without user opt-in or clear justification is a natural-language policy violation, and no such opt-in or justification appears in this file.
The document presents the skill in Gujarati and later embeds Chinese-only interface messages, but it does not state that the skill is region- or language-specific or offer any user language/locale choice. This can violate language/locale policy because users may be forced into a specific language context without opt-in.
No suspicious patterns detected.
