using-superpowers
Warn
Audited by Socket on Jun 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill itself does not install software or exfiltrate data, but its purpose is to force broad preemptive invocation of other skills, creating disproportionate transitive trust and workflow hijacking relative to a benign helper skill.
Confidence: 90%Severity: 58%
Audit Metadata