70High
This skill is vulnerable to shell command injection via PR creation
Behavior Analysis
Description verified — behavior matches claim
Claims to do
Finishing a Development Branch: Guide completion of development work by presenting clear options and handling chosen workflow.
Actually does
This skill executes various `git` commands to manage local branches (merge, delete, push), runs project-specific test commands (`npm test`, `cargo test`, `pytest`, `go test`), and interacts with GitHub via `gh pr create` to create pull requests. It also manages `git worktree` instances by listing and removing them, and implicitly contacts GitHub via `git push` and `gh pr create`.
Skill Info
Nameobra/superpowers/finishing-a-development-branch
Registrygithub
Version917e5f53b16b
PURLpkg:github/obra/superpowers@917e5f53b16b?skill=finishing-a-development-branch
Stars180,084
Installs52,400
Source
SHA-256dd2f82c6dc85...
SHA-1ad48721df9fa...
MD5843f51fc511c...
TLSH0291b4a2ad87...
ssdeep48:kzgsJEjIk...
Size4,250 bytes
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
GitHub
https://github.com/obra/superpowers/tree/main/skills/finishing-a-development-branch52,400 installs
Claude CodeDocs
/plugin marketplace add obra/superpowers/plugin install finishing-a-development-branch@obra/superpowers
CodexDocs
Gemini CLIDocs
gemini extensions install https://github.com/obra/superpowers.git --consent
CursorDocs
Skills.shDocs
npx skills add https://github.com/obra/superpowersAssessments (1)
AI Agent Traps ↗Command Injection via PR title/bodyhighcommand execution
The skill constructs a `gh pr create` command using placeholders for title and body. If these placeholders are filled with unsanitized user input or attacker-controlled data, it could lead to shell command injection.
90% confidenceline 78
gh pr create --title "<title>" --body "$(cat <<'EOF' ... EOF)"
Arbitrary code execution via project test commandsmediumcommand execution
The skill executes project-defined test commands (`npm test`, `cargo test`, `pytest`, `go test`). If the project's test scripts are malicious, this could lead to arbitrary code execution on the host system.
80% confidenceline 24
npm test / cargo test / pytest / go test ./...
Version History (4)
Dependencies (1)
superpowers.claude-plugin/marketplace.jsonnot scanned
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/obra/superpowers/finishing-a-development-branch)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/obra/superpowers/finishing-a-development-branch"><img src="https://mondoo.com/ai-agent-security/api/badge/github/obra/superpowers/finishing-a-development-branch.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/obra/superpowers/finishing-a-development-branch.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow