skills/xingyu4j/skills/using-superpowers/Socket

using-superpowers

Warn

Audited by Socket on Mar 26, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is not directly malicious and does not exfiltrate data, install software, or request credentials, but its stated purpose is to override normal agent workflow and aggressively force transitive skill invocation. That broadens trust and instruction scope in a way disproportionate to a simple meta-guidance skill.

Confidence: 85%Severity: 58%

Audit Metadata

Analyzed At

Mar 26, 2026, 07:37 AM

Package URL

pkg:socket/skills-sh/xingyu4j%2Fskills%2Fusing-superpowers%2F@23fbb949056a7210eaf3079e46555d23fe176ea1