Security audit
Security checks for vulnerabilities and agentic risk
This is a localized, guidance-only PowPow registration helper that does not run code or handle user credentials directly.
Install this only if Punjabi/Shahmukhi guidance is suitable for your users. Registration, login, and payment should happen only on the official PowPow pages; do not give the assistant your password, verification code, or payment credentials.
The file instructs the assistant to always use a particular service tone and phrasing style, and the entire skill is written for a specific locale/language. There is no indication that the user can choose another language or that this locale restriction is documented as an explicit, justified regional limitation.
The manifest sets "language": "pnb", indicating a fixed Punjabi locale. There is no accompanying note offering language choice or explaining that the skill is intended only for a Punjabi-specific audience, which can violate language/locale policy requirements.
The document is entirely in Punjabi/Urdu script and does not offer a language option or clearly document that the skill is restricted to users who can read that locale. This can cause operators, reviewers, or users to misunderstand payment and activation guidance, increasing the risk of incorrect handling of subscription state, payment support, or security-sensitive user interactions.
The entire document is written in Punjabi/Urdu-script localized language, while embedded user-facing error strings are partly in Chinese, and there is no indication that this language choice is optional or limited to a specific regional audience. Under the policy, forcing a specific language/locale without user opt-in or clear justification is a natural-language policy violation.
The file’s instructions and user-facing guidance are entirely in a specific language/locale, and there is no indication that users may opt into that language or choose an alternative. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is clearly justified.
The skill description and usage guidance are presented entirely in Punjabi/Shahmukhi, which can impose a language constraint on users without any stated opt-in or alternative language option. The policy calls for flagging language or locale requirements when the skill forces a specific language without user choice.
No suspicious patterns detected.
