using-superpowers
Warn
Audited by Socket on Jun 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is not directly malicious and contains no download, exfiltration, or credential theft behavior, but its stated purpose is to force unconditional invocation of other skills and defer control to them. The main risk is transitive trust and increased autonomous tool use, which is disproportionate for a simple meta-guidance skill.
Confidence: 100%Severity: 60%
Audit Metadata