Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed PowPow account registration and optional payment helper that handles sensitive signup data but keeps the behavior purpose-aligned and scoped to PowPow.
Install this only if you want an agent to help create a PowPow account. Expect to provide an email, password or generated password, verification code, and optionally an avatar; the helper will keep a temporary login token until cleanup. For payments, confirm the payment method yourself and complete payment only in the official Alipay or PayPal page.
Referenced artifact was not completely inspected
- کور سکرپٹ `scripts/powpow-register.mjs`: **انحصار توں آزاد**، **Node >= 18** لوڑ اے۔ شروع کرن توں پہلے اک واری `node scripts/powpow-register.mjs status` چلاؤ
Referenced artifact was not completely inspected
- کور سکرپٹ `scripts/powpow-register.mjs`: **انحصار توں آزاد**، **Node >= 18** لوڑ اے۔ شروع کرن توں پہلے اک واری `node scripts/powpow-register.mjs status` چلاؤ
Referenced artifact was not completely inspected
- کور سکرپٹ `scripts/powpow-register.mjs`: **انحصار توں آزاد**، **Node >= 18** لوڑ اے۔ شروع کرن توں پہلے اک واری `node scripts/powpow-register.mjs status` چلاؤ
Referenced artifact was not completely inspected
- کور سکرپٹ `scripts/powpow-register.mjs`: **انحصار توں آزاد**، **Node >= 18** لوڑ اے۔ شروع کرن توں پہلے اک واری `node scripts/powpow-register.mjs status` چلاؤ
Referenced artifact was not completely inspected
- کور سکرپٹ `scripts/powpow-register.mjs`: **انحصار توں آزاد**، **Node >= 18** لوڑ اے۔ شروع کرن توں پہلے اک واری `node scripts/powpow-register.mjs status` چلاؤ
Referenced artifact was not completely inspected
- کور سکرپٹ `scripts/powpow-register.mjs`: **انحصار توں آزاد**، **Node >= 18** لوڑ اے۔ شروع کرن توں پہلے اک واری `node scripts/powpow-register.mjs status` چلاؤ
Referenced artifact was not completely inspected
- کور سکرپٹ `scripts/powpow-register.mjs`: **انحصار توں آزاد**، **Node >= 18** لوڑ اے۔ شروع کرن توں پہلے اک واری `node scripts/powpow-register.mjs status` چلاؤ
Referenced artifact was not completely inspected
- کور سکرپٹ `scripts/powpow-register.mjs`: **انحصار توں آزاد**، **Node >= 18** لوڑ اے۔ شروع کرن توں پہلے اک واری `node scripts/powpow-register.mjs status` چلاؤ
Referenced artifact was not completely inspected
- کور سکرپٹ `scripts/powpow-register.mjs`: **انحصار توں آزاد**، **Node >= 18** لوڑ اے۔ شروع کرن توں پہلے اک واری `node scripts/powpow-register.mjs status` چلاؤ
Referenced artifact was not completely inspected
- کور سکرپٹ `scripts/powpow-register.mjs`: **انحصار توں آزاد**، **Node >= 18** لوڑ اے۔ شروع کرن توں پہلے اک واری `node scripts/powpow-register.mjs status` چلاؤ
The skill description is written as a fixed language presentation and does not indicate that users may choose another language or locale. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.
The skill clearly instructs use of environment variables and outbound network access, but it declares no explicit tool scope or permissions. That creates a least-privilege failure: a host may grant broader capabilities than intended, making credential handling and external requests less auditable and easier to misuse.
The skill metadata sets dir: rtl, and the entire skill is written to enforce a specific Punjabi/RTL interaction style, but there is no indication that users may choose another language or locale. Under the stated policy, forcing a language/locale without user opt-in is a natural-language policy violation unless clearly documented as region-specific or optional.
The skill directs the agent to invoke OS-specific commands like start/open/xdg-open on a locally generated payment page. Even if intended for convenience, this expands behavior from web registration assistance into host command execution, which can be abused if the generated path is untrusted, tampered with, or if the environment interprets the command unsafely.
The skill tells the agent to open a local payment page via system commands without explicit user notice or consent about local command execution. That weakens transparency and safe-operation expectations, and in combination with generated local files and payment flows could enable surprising or unsafe host-side actions.
The listing markets capabilities like pinning travel notes on maps and chatting with digital humans, which are outside the stated registration/login-only scope of this skill. Scope inflation is dangerous because it can cause users or orchestrators to invoke the skill in contexts where it may collect credentials or personal data under misleading expectations, increasing the chance of misuse and over-privileged activation.
The metadata does not clearly constrain when the skill should activate, despite the skill handling sensitive flows such as registration, login, email verification, and optional payment/subscription steps. Without tight trigger scope, an agent platform may invoke the skill too broadly during unrelated conversations, creating unnecessary exposure of user identity, email, verification, or payment-related data.
The manifest sets the language to "pnb" while the file does not indicate that users can choose another language or that the locale restriction is required for a region-specific purpose. This creates a natural-language policy concern because it may enforce a language setting without user opt-in.
The skill is entirely written in a fixed non-default language/script and does not offer any language selection, fallback, or opt-in. In a security-sensitive workflow involving registration, login links, tokens, passwords, and payment steps, users who cannot read the content may misunderstand critical actions or be socially engineered into approving unsafe operations without informed consent.
This markdown file is entirely written in Punjabi/Urdu-script language and does not indicate that users may choose another language or locale. Under the policy rule, forcing a specific language without opt-in is a natural-language policy violation unless the locale restriction is explicitly justified.
The manifest says this skill handles optional membership upgrade payments via Alipay/PayPal and explicitly frames unsupported areas narrowly. This file documents additional WeChat QR and Huawei IAP subscription flows, including activation behavior, which are not justified by the manifest's declared purpose and supported channels.
The documentation acknowledges live legacy Alipay payment code remains in the codebase, including simulated-payment behavior when sandbox keys are absent, while asserting the skill never uses it. Dead-or-legacy payment paths with fake-success logic are dangerous because they can be accidentally reconnected, misrouted to, or abused to activate accounts or create inconsistent payment state without a real transaction.
SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents all operational instructions in a single forced language/locale, with no opt-in, alternative language, or justification that the skill is region-specific.
The entire skill reference is written in Punjabi/Shahmukhi, and there is no indication that users can opt into another language or that the skill is intentionally limited to this locale. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
The screenshot guidance expands the skill beyond its declared registration-only purpose by encouraging the agent to send promotional images for posting, maps, and digital-human features. In an autonomous agent context, this can cause scope creep, misleading users about what the skill does, and unintended actions or persuasion outside the authorized task flow.