using-superpowers
Warn
Audited by Socket on Jul 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is not a normal task skill; it is a meta-instruction that compels invocation of other skills before any response, expanding transitive trust and reducing agent discretion. It shows no direct malware, installs, credential access, or exfiltration, but its actual footprint is disproportionate to its stated helper role because it can route many tasks through additional unreviewed skill content.
Confidence: 87%Severity: 56%
Audit Metadata