Security audit
Security checks for vulnerabilities and agentic risk
This is a guide-only Tamil PowPow registration helper with no scripts, credential collection, local execution, or persistence.
Install this only if you want a Tamil-language guide for PowPow registration/subscription. Keep registration, passwords, verification codes, and payment details on the official site or app, and verify subscription cost and renewal terms before paying.
Line L31 describes SKILL.md as containing 'language rules', while the entire README content is presented in Tamil with no indication that users may choose another language. This suggests a possible language/locale constraint that is not documented as optional or justified, which can violate policy requiring user choice for language.
The file contains prescriptive conversational instructions in Tamil for how the assistant should speak, but it does not say this is optional or limited to Tamil-speaking users. Under the policy, forcing a specific language or locale without user opt-in is a natural-language policy violation.
The manifest explicitly sets the language to "ta", which indicates a fixed locale/language choice. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is clearly documented and justified, which is not present here.
This file presents registration guidance in Tamil but repeatedly references Chinese UI strings and China-specific constraints, such as mainland China mobile-number validation. That creates a language/locale policy concern because the skill appears to assume a specific language/region context without stating that it is region-specific or giving users an opt-in choice.
This markdown file contains operational instructions entirely in Tamil, which effectively forces a specific language for skill maintainers or users consuming the guidance. The file does not indicate that Tamil is optional, nor does it justify a region-specific scope that would exempt the restriction.
The document is primarily written in Tamil, but line L32 presents the fixed user-facing text "Auto-renews. Cancel anytime." in English with no indication that the user can choose or localize the language. This can violate a language/locale policy when the skill otherwise targets a Tamil-speaking context and does not document or justify the forced English output.
No suspicious patterns detected.
