Security audit
Security checks for vulnerabilities and agentic risk
This skill helps users create a PowPow account and optional subscription through a disclosed, user-directed workflow, with sensitive handling that is mostly proportionate to that purpose.
Install only if you are comfortable letting the agent mediate PowPow account creation, handle your email verification code, optional avatar, and a temporary login token. Do not share payment credentials with the agent; payment should happen only in the official Alipay or PayPal cashier, and run cleanup when finished.
Referenced artifact was not completely inspected
- मुख्य स्क्रिप्ट `scripts/powpow-register.mjs`: **शून्य अवलंबन**, **Node >= 18** आवश्यक. सुरू करण्यापूर्वी एकदा `node scripts/powpow-register.mjs status` चालवा
Referenced artifact was not completely inspected
- मुख्य स्क्रिप्ट `scripts/powpow-register.mjs`: **शून्य अवलंबन**, **Node >= 18** आवश्यक. सुरू करण्यापूर्वी एकदा `node scripts/powpow-register.mjs status` चालवा
Referenced artifact was not completely inspected
- मुख्य स्क्रिप्ट `scripts/powpow-register.mjs`: **शून्य अवलंबन**, **Node >= 18** आवश्यक. सुरू करण्यापूर्वी एकदा `node scripts/powpow-register.mjs status` चालवा
Referenced artifact was not completely inspected
- मुख्य स्क्रिप्ट `scripts/powpow-register.mjs`: **शून्य अवलंबन**, **Node >= 18** आवश्यक. सुरू करण्यापूर्वी एकदा `node scripts/powpow-register.mjs status` चालवा
Referenced artifact was not completely inspected
- मुख्य स्क्रिप्ट `scripts/powpow-register.mjs`: **शून्य अवलंबन**, **Node >= 18** आवश्यक. सुरू करण्यापूर्वी एकदा `node scripts/powpow-register.mjs status` चालवा
Referenced artifact was not completely inspected
- मुख्य स्क्रिप्ट `scripts/powpow-register.mjs`: **शून्य अवलंबन**, **Node >= 18** आवश्यक. सुरू करण्यापूर्वी एकदा `node scripts/powpow-register.mjs status` चालवा
Referenced artifact was not completely inspected
- मुख्य स्क्रिप्ट `scripts/powpow-register.mjs`: **शून्य अवलंबन**, **Node >= 18** आवश्यक. सुरू करण्यापूर्वी एकदा `node scripts/powpow-register.mjs status` चालवा
Referenced artifact was not completely inspected
- मुख्य स्क्रिप्ट `scripts/powpow-register.mjs`: **शून्य अवलंबन**, **Node >= 18** आवश्यक. सुरू करण्यापूर्वी एकदा `node scripts/powpow-register.mjs status` चालवा
Referenced artifact was not completely inspected
- मुख्य स्क्रिप्ट `scripts/powpow-register.mjs`: **शून्य अवलंबन**, **Node >= 18** आवश्यक. सुरू करण्यापूर्वी एकदा `node scripts/powpow-register.mjs status` चालवा
Referenced artifact was not completely inspected
- मुख्य स्क्रिप्ट `scripts/powpow-register.mjs`: **शून्य अवलंबन**, **Node >= 18** आवश्यक. सुरू करण्यापूर्वी एकदा `node scripts/powpow-register.mjs status` चालवा
Referenced artifact was not completely inspected
- मुख्य स्क्रिप्ट `scripts/powpow-register.mjs`: **शून्य अवलंबन**, **Node >= 18** आवश्यक. सुरू करण्यापूर्वी एकदा `node scripts/powpow-register.mjs status` चालवा
The notes explicitly describe agent-driven code sending, registration, ordering, and an automatic transition to a payment path, yet there is no visible user warning or consent language for these impactful actions. In a skill that can create accounts and steer users toward payment, lack of prominent disclosure and confirmation materially increases the risk of unauthorized or deceptive transactions.
The entire skill description is written in Marathi, and there is no indication that users may choose another language or that the skill is intentionally limited to Marathi-speaking users for a documented regional reason. This creates a natural-language policy concern because it implicitly enforces a locale without opt-in or justification.
The README describes agent-assisted registration, profile photo upload, and handling of registration data, but does not clearly warn users that the agent will process personal data and potentially sensitive account information during the flow. This can lead to uninformed consent, oversharing, and privacy/security misunderstandings, especially because the skill is designed to mediate account creation and upload user content.
The skill description is written entirely in Marathi and frames the workflow as if interaction will occur in Marathi, without offering any user-language choice or documenting that the skill is only intended for Marathi-speaking users. In a registration and payment-assistance flow, forcing an unexpected language can cause users to misunderstand credential, verification, or payment steps, increasing the risk of consent errors and account mistakes.
The conversation UX section mandates a fixed Marathi response style for every turn, with no opt-in or fallback, which can materially impair comprehension for users who do not read Marathi. Because this skill handles account creation, email verification, and optional payment steps, reduced comprehension can lead to erroneous submissions, unintended actions, or users sharing sensitive information without fully understanding the prompts.
The listing exposes a skill capable of agent-mediated registration and related actions, but it does not define when or under what constraints the skill should activate. Ambiguous trigger scope increases the chance of unintended invocation or use in contexts where users did not expect account-affecting behavior.
This markdown file contains user-facing operational instructions exclusively in Marathi, including command guidance and safety-critical workflow steps. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is clearly documented and justified, which it is not here.
The security-design table says the password is never written to the state file and that only five fields are stored. However, the same table lists the stored fields as including token / outTradeNo, while later workflow steps require refresh-login to re-login using a password from the environment, and line L115 says refresh-login cannot be used if the state file is lost, implying additional persisted credentials may be assumed elsewhere in the documentation. More directly, the documentation's strong guarantee about exact stored contents is internally inconsistent enough to misstate actual intended behavior.
This markdown file presents all operational instructions and user-facing guidance in Marathi only. The policy allows locale constraints only when the skill offers opt-in language choice or clearly documents a justified regional restriction, which is not present here.
The entire skill reference is written in Marathi, while embedded error strings and product behavior indicate a multilingual or non-Marathi environment. There is no natural-language statement offering users a language choice or opt-in, which can violate a language/locale policy requiring user selection rather than a forced locale.
All natural-language instructions in the file are presented in Marathi, and there is no indication that users or operators can choose another language. This can violate language/locale policy when a skill effectively forces a specific language without explicit opt-in or documented regional justification.
The guidance says to send screenshots whenever they seem useful at runtime, which is a broad trigger that can cause the agent to introduce attachments without a narrowly scoped user request. In a skill context, overly permissive activation rules can lead to unintended content injection, confusing responses, or disclosure of packaged or remote resources in situations where images were not actually needed.
The file's natural-language interface, usage text, and operational messages are entirely in Chinese, including the command descriptions and all user-facing success/error output. Because the script does not offer any language selection or explain that it is intentionally region-specific, it violates the language/locale policy criterion for files of any type.
The file sets the language to "mr" while the rest of the metadata includes mixed-language content, but provides no explanation that the skill is intentionally region-specific or opt-in. This can be a natural-language policy issue if users are forced into a specific language experience without documented choice.