Security audit
Security checks for vulnerabilities and agentic risk
The skill is a coherent PowPow registration helper, but it intentionally handles account credentials, email codes, login tokens, and optional payment links.
Install this only if you want an agent to complete PowPow registration for you. Use a PowPow-specific password, do not share mailbox or payment-account access, confirm PayPal auto-renewal before authorizing it, run cleanup when finished, and delete any temporary checkout HTML files after payment.
Referenced artifact was not completely inspected
- Skrypt główny `scripts/powpow-register.mjs`: **zero zależności**, wymaga **Node ≥ 18**. Przed startem uruchom raz `node scripts/powpow-register.mjs status`, ż
Referenced artifact was not completely inspected
- Skrypt główny `scripts/powpow-register.mjs`: **zero zależności**, wymaga **Node ≥ 18**. Przed startem uruchom raz `node scripts/powpow-register.mjs status`, ż
Referenced artifact was not completely inspected
- Skrypt główny `scripts/powpow-register.mjs`: **zero zależności**, wymaga **Node ≥ 18**. Przed startem uruchom raz `node scripts/powpow-register.mjs status`, ż
Referenced artifact was not completely inspected
- Skrypt główny `scripts/powpow-register.mjs`: **zero zależności**, wymaga **Node ≥ 18**. Przed startem uruchom raz `node scripts/powpow-register.mjs status`, ż
Referenced artifact was not completely inspected
- Skrypt główny `scripts/powpow-register.mjs`: **zero zależności**, wymaga **Node ≥ 18**. Przed startem uruchom raz `node scripts/powpow-register.mjs status`, ż
Referenced artifact was not completely inspected
- Skrypt główny `scripts/powpow-register.mjs`: **zero zależności**, wymaga **Node ≥ 18**. Przed startem uruchom raz `node scripts/powpow-register.mjs status`, ż
Referenced artifact was not completely inspected
- Skrypt główny `scripts/powpow-register.mjs`: **zero zależności**, wymaga **Node ≥ 18**. Przed startem uruchom raz `node scripts/powpow-register.mjs status`, ż
Referenced artifact was not completely inspected
- Skrypt główny `scripts/powpow-register.mjs`: **zero zależności**, wymaga **Node ≥ 18**. Przed startem uruchom raz `node scripts/powpow-register.mjs status`, ż
Referenced artifact was not completely inspected
- Skrypt główny `scripts/powpow-register.mjs`: **zero zależności**, wymaga **Node ≥ 18**. Przed startem uruchom raz `node scripts/powpow-register.mjs status`, ż
Referenced artifact was not completely inspected
- Skrypt główny `scripts/powpow-register.mjs`: **zero zależności**, wymaga **Node ≥ 18**. Przed startem uruchom raz `node scripts/powpow-register.mjs status`, ż
Referenced artifact was not completely inspected
- Skrypt główny `scripts/powpow-register.mjs`: **zero zależności**, wymaga **Node ≥ 18**. Przed startem uruchom raz `node scripts/powpow-register.mjs status`, ż
The skill description is entirely in Polish and presents the assistant as a Polish-language registration assistant, with no indication that users may choose another language or locale. Under the policy, forcing a specific language without opt-in is a natural-language policy violation unless the locale restriction is clearly justified.
The skill is explicitly designed to collect and relay sensitive registration data, handle passwords, process email verification codes, create login links, and initiate subscription payment flows on the user's behalf inside the conversation. Although it includes some operational safeguards, it lacks a clear user-facing consent, privacy disclosure, and security warning before collecting credentials and performing account/payment actions, which creates significant phishing, credential-handling, and unauthorized-action risk.
The manifest sets the skill language to "pl" with no indication that users can opt into another language or that the skill is intentionally limited to a Polish-only region or audience. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
The guidance says to keep the same tone and always end each turn with a Polish-language block labeled „następny krok”. This imposes a specific language/locale convention in the interaction text without any opt-in or alternative language choice for the user.
The skill explicitly authorizes the agent to create payment orders and monitor payment status for both Alipay and auto-renewing PayPal subscriptions, but it does not require an explicit user confirmation step immediately before initiating a charge flow. For PayPal especially, this can lead to accidental enrollment in recurring billing if the agent proceeds based on ambiguous user intent, making unauthorized or unintended subscription activation more likely.
This markdown file contains user-facing operational guidance exclusively in Polish, and there is no indication that the skill supports user language selection or that Polish is a required regional constraint. The policy calls for flagging language or locale restrictions when a specific language is effectively forced without user opt-in.
The guidance tells the agent to send screenshots whenever the user 'doesn't know' the product or needs to 'see' it, which is a broad trigger that can cause unnecessary file sharing without a precise user request. In a skill context, this can lead to oversharing bundled assets or revealing interface details more aggressively than intended, even if the content itself is not highly sensitive.
The file directs the agent to send local images and, if missing, fetch externally hosted copies from GitHub/jsDelivr without requiring disclosure or confirmation. That creates a real risk of unintended external network access, metadata leakage, and silent transmission to third-party infrastructure, which is especially problematic in restricted or privacy-sensitive environments.
The script claims cleanup removes session credentials, but it also creates payment checkout artifacts in temporary directories that persist after cleanup. Those files can contain sensitive authorization material, including an embedded bearer-style login token in the generated login link flow or a live PayPal approval URL, allowing another local user or process with temp-directory access to reuse the session or continue payment actions.
The skill description and operational instructions are written as if the interaction will occur in Polish, but there is no statement that the user may choose another language. Under the policy, forcing a specific language or locale without opt-in is a natural-language policy concern.
The document contains fixed English phrases such as “Auto-renews”, “Cancel anytime.”, and “You're All Set!” inside an otherwise Polish-language skill description. This indicates a language/locale constraint in user-facing text without any documented user opt-in or language-selection behavior.