popnow-skill-finder
Find a free, ready-made PopNow style preset (an Agent Skill) for what the user wants to make - product launch or demo videos, pitch and slide decks, landing pages and websites, portfolios, dashboards, editorial images and thumbnails - show the options with preview links, let the user pick, then install and follow the chosen skill. Use when the user asks to make a video, deck, web page or image where a proven style helps ("make a product launch video", "I need a pitch deck", "build a SaaS landing page", "find a skill for YouTube thumbnails", "is there a template for this"). Skills are free; only the PopNow generations they run cost credits, quoted first.
72
90%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Medium
Suggest reviewing before use
W009: Direct money access capability detected (payment gateways, crypto, banking).
What this means
The skill is specifically designed for direct financial operations, giving the agent the ability to move money or execute financial transactions — such as payment processing, cryptocurrency operations, banking integrations, or market order execution.
Why it was flagged
The skill assists in finding, installing, and using PopNow agent skills and media generation tools, where media generations spend user credits ($0.001 per credit) and are quoted and confirmed by the user before execution. This constitutes an indirect financial operation (billable usage/credits consumed upon user confirmation). Since it is indirect, no direct financial control evaluation is required.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The required workflow searches and installs agent skills from the PopNow catalog API, which is a public community registry where authors publish skill packages containing SKILL.md playbooks and scripts.
- Repository
popnow-ai/popnow-skills
- Revision
7116ca7
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.