using-superpowers

SUSPICIOUS. The skill is internally coherent as a meta-workflow helper, but its core behavior creates transitive trust risk by compelling the agent to load other skills before responding. It has low direct malware indicators and no explicit credential or network abuse, yet it materially widens the attack surface if unsafe skills are installed.