using-superpowers

SUSPICIOUS: the skill is mostly a workflow router, and its referenced installs appear to be official same-project sources, but it imposes unusually coercive agent-control rules and relies on transitive skill/plugin execution with opaque automatic setup. No direct credential theft, exfiltration, or malicious endpoint routing is present in this file.