Security audit
Security checks for vulnerabilities and agentic risk
This is a guide-only Urdu registration assistant for PowPow that does not run code, collect credentials, or handle payments itself.
Use this skill if you want Urdu guidance for PowPow registration and activation. Registration and payment should stay on the official PowPow pages, and you should not share passwords, verification codes, or payment proof in chat. Expect it to send public screenshot links and product/payment-page links as part of the walkthrough.
The README is entirely written in Urdu and presents the skill as an assistant for guiding users through registration, but it does not indicate that language is optional or configurable. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is clearly justified.
The manifest sets "language": "ur", which indicates a fixed locale for the skill. Under the policy, forcing a specific language without user opt-in or a clearly documented region-specific justification is a natural-language policy violation.
This reference material mandates a specific language/locale presentation through its natural-language content, and it does not indicate that users may opt into another language or that the skill is intentionally restricted to a specific region or audience. Under the policy, forcing a specific language without user choice is a natural-language policy violation.
The instruction says to use this at runtime whenever the user has no concept of the product or needs to see what finished products look like, then to directly send a relevant link. These conditions are subjective and broad, with no clear boundaries or negative examples, which could lead to unintended invocation in ordinary product-explanation contexts.
This reference file is primarily written in Urdu, but line L32 hard-codes the English phrase "Auto-renews. Cancel anytime." as fixed page text. Because the document does not indicate that English is intentional or user-selectable, this is a natural-language locale policy concern under the language-choice rule.
The file instructs that users reopening the subscription page will see the English phrase "You're All Set!" even though the surrounding guidance is in Urdu. This forces a specific language in user-facing behavior without documenting a locale requirement or offering a choice.
No suspicious patterns detected.
