setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs adding and installing the Superpowers plugin at runtime (e.g., "/plugin marketplace add obra/superpowers-marketplace"), which is fetched into Claude Code and is described as auto-activating/controlling agent behavior, so it directly affects prompts/instructions and is required by the setup flow.