Security audit
Security checks for vulnerabilities and agentic risk
This is a Vietnamese guidance-only skill for helping users register and activate a PowPow account, with no executable code or hidden local access.
Install this if you want Vietnamese help registering for PowPow. Use only the official PowPow pages for account creation and payment, and do not give the assistant your password, verification code, payment receipt, or private account details.
The skill instructions and prescribed user-facing phrasing are entirely in Vietnamese, including exact wording the assistant should say to users. There is no indication that users may choose another language or that the skill is intentionally limited to Vietnamese-speaking users for a documented regional or compliance reason.
The document specifies a fixed Chinese error message for users, and the rest of the troubleshooting table continues to rely on original Chinese UI text. Because the file does not state that this skill is region-specific or that users can opt into this language, it appears to impose a specific locale without user choice.
The quick-reference table maps common conversational phrases like "Đăng ký xong làm được gì?" and "Ngoài đăng bài còn chơi được gì?" to sending screenshots, but it does not define when these phrases should or should not trigger the skill behavior. Because the examples are ordinary support-language patterns and no negative examples or scope constraints are provided, the trigger conditions are overly broad for a markdown skill reference.
The manifest sets "language": "vi", which indicates a fixed locale. Under the policy, forcing a specific language without user opt-in or documented justification is a natural-language policy concern.
This markdown file is primarily written in Vietnamese, but line L32 presents required UI text only in English ('Auto-renews. Cancel anytime.') with no indication that users can choose their preferred language. That can conflict with language/locale policy expectations when a skill appears to prescribe a fixed language without opt-in.
The file tells the agent to "send the corresponding link directly" and specifies raw GitHub and jsDelivr URLs, but it does not warn that doing so sends the user to externally hosted content. For markdown files, behaviors that can affect privacy or external data exposure should be accompanied by a clear warning or disclosure.
No suspicious patterns detected.
