using-superpowers
Warn
Audited by Socket on May 7, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is not directly malicious and shows no credential theft, exfiltration, or installer abuse, but its main purpose is to coerce mandatory use of other skills before any response. That transitive trust pattern is broader than necessary and increases risk by delegating behavior to unreviewed downstream skills.
Confidence: 91%Severity: 62%
Audit Metadata