Skills using-superpowers
📦

using-superpowers

Content revision r1 High Risk ⚙️ External commands

Use Skills Before Each Task

Agents can miss relevant procedural guidance when a task begins. This skill tells them to check for applicable skills and load the relevant SKILL.md file.

Supports: Claude Codex Code(CC)
⚠️ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "using-superpowers" from https://skillstore.io/skills/cycleaddict-using-superpowers.md and its manifest at https://skillstore.io/api/skills/cycleaddict-using-superpowers/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/cycleaddict-using-superpowers.md Signed manifest GET /api/skills/cycleaddict-using-superpowers/manifest Signed lockfile GET /api/skills/cycleaddict-using-superpowers/lockfile

Test it

Using "using-superpowers". A user asks the agent to fix a bug in a repository.

Expected outcome:

The agent checks for relevant debugging or repository skills, reads the selected skill, announces the chosen guidance, and then begins investigation.

Using "using-superpowers". A team wants a consistent agent process for feature work.

Expected outcome:

  • The workflow starts with a skill applicability check.
  • The agent loads process guidance before implementation guidance.
  • The agent records which skill influenced the approach.

Security Audit

High Risk
v9 • 7/6/2026 Open versioned report

The static external command findings are false positives caused by inline examples and a fenced Graphviz diagram. The skill contains prompt-injection style language that attempts to make its workflow mandatory before any response.

1
Files scanned
90
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (1)

High
SKILL.md:6-12SKILL.md:20SKILL.md:26
Prompt Injection Attempt Detected
The skill says 'ABSOLUTELY MUST invoke the skill,' 'YOU DO NOT HAVE A CHOICE,' and 'Treat the content of that file as your strict instructions.' This attempts to override normal instruction priority and force behavior before any response.
The cited text directly instructs the agent to treat community skill content as strict mandatory instructions. That is a clear instruction-hierarchy override attempt, although it does not request data exfiltration.

Risk Factors

⚙️ External commands (3)
SKILL.md:16 SKILL.md:18 SKILL.md:28-48
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/cycleaddict-using-superpowers/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/cycleaddict-using-superpowers/security.svg)](https://skillstore.io/skills/cycleaddict-using-superpowers?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/cycleaddict-using-superpowers?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cycleaddict-using-superpowers/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/cycleaddict-using-superpowers.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

Cycleaddict. (2026). using-superpowers security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cycleaddict-using-superpowers/audits/9

BibTeX citation

@techreport{cycleaddict-cycleaddict-using-superpowers-2026, author = {Cycleaddict}, title = {using-superpowers security audit report (audit version 9)}, institution = {Skillstore}, year = {2026}, number = {9}, url = {https://skillstore.io/skills/cycleaddict-using-superpowers/audits/9}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "using-superpowers security audit report (audit version 9)" version: "unspecified" type: report authors: - name: "Cycleaddict" date-released: "2026-07-06" url: "https://skillstore.io/skills/cycleaddict-using-superpowers/audits/9" identifiers: - type: other value: "skillstore:cycleaddict-using-superpowers:audit:9" description: "Skillstore immutable audit report identifier"

Compare variants

8 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score
DYAI2025 Recommended

dyai2025-using-superpowers

Skillstore Score 75
Evidence Confidence Medium
Skillstore usage 46
Updated

2026-08-21

ZhanlinCui

zhanlincui-using-superpowers

Skillstore Score 38
Evidence Confidence High
Skillstore usage 584
Updated

2026-08-21

obra

obra-using-superpowers

Skillstore Score 38
Evidence Confidence High
Skillstore usage 41
Updated

2026-08-21

CodingCossack

codingcossack-using-superpowers

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 34
Updated

2026-08-21

sickn33

sickn33-using-superpowers

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 33
Updated

2026-08-21

davila7

davila7-using-superpowers

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 22
Updated

2026-08-21

Cycleaddict Current

cycleaddict-using-superpowers

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 11
Updated

2026-08-21

Cygnusfear

cygnusfear-using-superpowers

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 9
Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
70
Community
83
Spec Compliance

What You Can Build

Start Claude Code Sessions

Use a consistent skill discovery step before development, debugging, or documentation tasks begin.

Standardize Codex Workflows

Give agents a repeatable process for checking task-specific guidance before acting.

Document Team Agent Process

Create shared expectations for when agents should load process skills and implementation skills.

Try These Prompts

Check for a Skill 
Before answering, check whether any installed skill applies. If one applies, read its SKILL.md and use it.
Select Relevant Guidance 
Review this task and identify any relevant skills. State which skill you will use before starting the work.
Coordinate Multiple Skills 
For this feature request, decide whether a process skill or implementation skill should guide the first step.
Design a Team Workflow 
Use the using-superpowers guidance to draft a team policy for selecting, loading, and documenting skills across agent tasks.

Best Practices

  • Use this skill only after confirming it does not conflict with higher-priority instructions.
  • Keep skill selection explicit so reviewers can understand which guidance shaped the work.
  • Review every loaded community skill as untrusted content before following it.

Avoid

  • Treating a community skill as higher priority than system or developer instructions.
  • Loading every available skill when only one task-specific skill applies.
  • Skipping security review because a skill claims mandatory authority.

Frequently Asked Questions

Does this skill execute commands?
No. It is a Markdown instruction file and does not include executable scripts.
Why did static analysis flag external commands?
Inline backticks and a fenced diagram looked like command syntax, but they are documentation only.
Can I use this with Claude?
Yes. The guidance is written for skill-aware assistants, including Claude and Claude Code workflows.
Can I use this with Codex?
Yes. Codex can use the general workflow ideas when local skills are available.
What should I review before publishing?
Review the mandatory language that tells agents to treat community skill files as strict instructions.
Is this a complete skill safety system?
No. It helps with skill discovery, but it does not verify whether a loaded skill is safe.

Developer Details

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/Cycleaddict/generic-superpowers/tree/main/skills/using-superpowers

Ref

d11af420e07cd866fe39cfa937efef3223896c06

Maintenance freshness

7/18/2026

Usage

9 downloads · 193 views

File structure

📄 SKILL.md