using-superpowers

Warn

Audited by Socket on Jun 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is not directly malicious and contains no download, exfiltration, or credential theft behavior, but its stated purpose is to force unconditional invocation of other skills and defer control to them. The main risk is transitive trust and increased autonomous tool use, which is disproportionate for a simple meta-guidance skill.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 17, 2026, 07:11 AM
Package URL
pkg:socket/skills-sh/vinvcn%2Fobra-superpowers-zh-CN%2Fusing-superpowers%2F@ec39f7fc822253b5c76af83333278be7d45508d21475086504f40253e399bb99
Security Audit — socket — using-superpowers