install-superpowers-for-kimi
Warn
Audited by Socket on Apr 30, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated goal matches installing a workflow, but the footprint is disproportionate: it replaces official install trust with a personal fork, persists behavior-changing hooks, and forces transitive loading of many external skills on every conversation. Main risk is supply-chain plus persistent prompt/control injection, not confirmed malware.
Confidence: 90%Severity: 84%
Audit Metadata