install-superpowers-for-kimi

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated goal matches installing a workflow, but the footprint is disproportionate: it replaces official install trust with a personal fork, persists behavior-changing hooks, and forces transitive loading of many external skills on every conversation. Main risk is supply-chain plus persistent prompt/control injection, not confirmed malware.

Confidence: 90%Severity: 84%
Audit Metadata
Analyzed At
Apr 30, 2026, 04:43 PM
Package URL
pkg:socket/skills-sh/Dqz00116%2Fkimi-with-superpowers%2Finstall-superpowers-for-kimi%2F@fd54fc4fe6510d0d762315126be3f7fef0c92530