powpow-register@2.2.0
CAUTIONPublisher claims: "帮用户在对话内完成 PowPow（泡泡）注册与一键登录。agent 代办填表（含头像上传）、发送邮箱验证码，用户只需提供基本信息、查收一次验证码，全程不脱离对话；当前平台免费测试期内注册后即可直接使用全部功能，订阅支付（支付宝/PayPal）为可选的会员升级，需要时 agent 同样代办下单与到账跟踪。当用户说「注册泡泡」「注册 powpow 账号」「泡泡怎么注册」「帮我注册一个 powpow 账号」「sign up powpow」时触发；也处理注册卡壳（收不到验证码、用户名/邮箱被占用）和激活问题（登录提示「账户未激活」/ pending_payment、怎么订阅付费、泡泡收费吗）。需要 Node ≥ 18；不可用时自动退回纯指引模式。不含发帖/创建数字人（那是 powpow-simple 的事），不含代码开发。" Observed in sandbox: static analysis only — behavior not yet observed.
Is [email protected] safe to install?
KillerSkills analysed it statically (a sandbox run is pending) on 2026-10-27 and scored it 69/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Summary: static analysis only — behavior not yet observed.
Behavior trace
Queued for honeypot run · static analysis onlyThis version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.
Static findings
No other findings across 1,195 lines in 15 files.
What would make this Verified
11 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%- Unclaimed publisher≈ +8 on the totalClaim durenzidu: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
- File type combined with upload action≈ +2 on the totalRemove the call, or declare the host in frontmatter and explain in the README what is sent and why.