Security audit
Security checks for vulnerabilities and agentic risk
This is a documentation-only registration guide that directs users through PowPow/Bubble signup and subscription activation without taking credentials, submitting forms, or running code.
Before installing, understand that this skill guides users to create a PowPow/Bubble account and may lead them to a paid subscription page. Registration and payment remain user-controlled in the browser or app; users should not share passwords, verification codes, or payment proof with the assistant.
The manifest sets "language": "it", which indicates the skill is constrained to Italian. Under the policy rules, forcing a specific language without user opt-in or documented justification is a natural-language policy concern.
The file is written primarily in Italian, but it instructs use of fixed English phrases such as "Auto-renews. Cancel anytime." and "You're All Set!". This can violate language/locale policy expectations because the skill does not state that English-only output is required, optional, or region-specific.
L03 states that all rules in the document come from the platform source code, while L04 says that when the platform updates, the real online behavior is what counts. These statements conflict on whether this document is strictly source-derived or may rely on observed runtime behavior instead.
This markdown file includes user-facing error and login text in Chinese while the surrounding documentation is in Italian. Under the language/locale policy rule, forcing or presenting a fixed language without opt-in can be a policy concern unless the locale constraint is explicitly justified.
No suspicious patterns detected.
