Security audit
Security checks for vulnerabilities and agentic risk
This is a guide-only Japanese registration assistant that does not run code or handle credentials itself.
Install this if you want Japanese-language guidance for PowPow registration. Do not share passwords, verification codes, or payment details in chat; the skill itself instructs the agent not to ask for them and to leave those steps on the official PowPow pages.
The instruction powpow の従来のサービス型トーンを踏襲します appears within an otherwise fully Japanese skill specification and provides no option to adapt language or locale to the user's preference. For a general registration assistant, this creates a language-policy issue because the skill is effectively constrained to Japanese without documented user choice or region-specific justification.
The listing text and notes advertise broader product capabilities such as map-based social interaction and digital-human chat, while the documented skill scope is limited to registration and subscription activation support. This mismatch can mislead users into invoking the skill for unsupported actions, increasing the chance of unsafe handoffs, confused-deputy behavior, or over-collection of user data during account-support flows.
The manifest sets "language": "ja", which indicates a fixed language/locale for the skill. The surrounding metadata does not offer user opt-in, alternative locale support, or a documented region-specific reason for this restriction.
This markdown file contains operational instructions exclusively in Japanese, which can impose a specific language on users or operators without opt-in. Under the policy rule for natural-language violations, forcing a language without offering choice or justification is a reportable issue.
This markdown is primarily written in Japanese, but line L25 hard-codes the English phrase "Auto-renews. Cancel anytime." as fixed wording. That can violate the language/locale policy because the file does not indicate user opt-in for English or explain why mixed-language output is required.
No suspicious patterns detected.
