Security audit
Security checks for vulnerabilities and agentic risk
This is a Hindi-language guidance-only skill for PowPow registration and subscription activation, with no scripts, local execution, credential collection, or hidden persistence.
Install this if you want Hindi guidance for registering and activating a PowPow account. Only enter passwords, verification codes, and payment details on the official PowPow site or payment provider pages, not in chat.
The skill description is written entirely in Hindi and presents the assistant behavior in that language, but the README does not indicate that language selection is optional or that the skill is intended only for a Hindi-speaking audience. This creates a natural-language policy concern because it effectively imposes a locale/language without user opt-in.
The document states the assistant should follow a specific service style in Hindi, and the entire skill is written as if that language is mandatory. There is no indication that users may choose another language or opt in to Hindi, which can violate language/locale policy requirements.
This JSON manifest includes search keywords such as "AGENT सोशल" and "यात्रा वृत्तांत" that are generic discovery phrases rather than narrowly scoped activation terms. In a manifest context, such broad keywords can overlap with common user intents and there are no constraints or negative examples clarifying when this skill should or should not be matched.
The manifest sets "language": "hi", which indicates a fixed language choice. There is no accompanying note that this is an optional user-selected locale or that the skill is intentionally region-specific, so this may violate language/locale policy expectations.
The document presents all operational guidance exclusively in Hindi, which can impose a language constraint on users or operators without any opt-in or alternative locale. The policy specifically calls for flagging language or locale requirements that are forced without user choice or clear justification.
This file presents operational instructions only in Hindi and does not mention that the user can choose another language or that the skill is limited to Hindi-speaking contexts. That creates a potential language-policy violation because it implicitly forces a specific language without documented opt-in or justification.
The instruction says to use the screenshots 'as needed at runtime' and when the user does not understand the product or needs to see what the finished product looks like. These conditions are subjective and open-ended, with no clear boundaries or negative examples, which could cause the skill to be invoked in overly broad conversational contexts.
The document is written in Hindi, but line L32 mandates the fixed English text "Auto-renews. Cancel anytime." as page copy. This is a natural-language locale inconsistency that could violate language policy if the skill is expected to preserve the user's language unless a choice or justification is provided.
No suspicious patterns detected.
