{
  "entry": {
    "kind": "plugin",
    "slug": "superpowers-2",
    "name": "Superpowers 2",
    "vendor": "obra",
    "description": "The second-generation Superpowers plugin bundles skills together with hooks that enforce a structured test-driven workflow — parallel task execution, code review, and root-cause debugging — rather than leaving the agent to choose whether to follow the process.\n\nHooks are the meaningful difference from a plain skill library. A hook fires on an event such as a file write or session start, which means part of the plugin runs without the agent deciding to invoke it. That is what makes the workflow stick, and also what makes review important: a hook is code that executes on your machine on a trigger you did not explicitly approve each time. It declares filesystem read and write plus shell execution, inheriting the host agent's authority.",
    "website": "https://github.com/obra/superpowers",
    "repository": "https://github.com/obra/superpowers",
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "community",
    "capabilities": [
      "filesystem:read",
      "filesystem:write",
      "shell:execute"
    ],
    "packaging": {
      "manager": "claude-plugin",
      "packageName": "superpowers-2"
    },
    "configFiles": null,
    "category": null,
    "updatedAt": "2026-09-02",
    "risk": {
      "score": 65,
      "band": "high",
      "signals": [
        {
          "id": "trust-community",
          "kind": "trust",
          "label": "Established community project",
          "contribution": -10
        },
        {
          "id": "high-risk-capabilities",
          "kind": "capability",
          "label": "2 high-risk capabilities: filesystem:write, shell:execute",
          "contribution": 20
        },
        {
          "id": "filesystem-write-shell-risk",
          "kind": "combination",
          "label": "Persistence + execution risk (medium)",
          "description": "Shell execution plus filesystem write means the agent can plant persistent backdoors (e.g. modifying startup scripts).",
          "contribution": 5
        }
      ],
      "dangerousCombos": [
        {
          "id": "filesystem-write-shell-risk",
          "name": "Persistence + execution risk",
          "description": "Shell execution plus filesystem write means the agent can plant persistent backdoors (e.g. modifying startup scripts).",
          "capabilities": [
            "shell:execute",
            "filesystem:write"
          ],
          "severity": "medium"
        }
      ]
    },
    "dangerousCombos": [
      {
        "id": "filesystem-write-shell-risk",
        "name": "Persistence + execution risk",
        "description": "Shell execution plus filesystem write means the agent can plant persistent backdoors (e.g. modifying startup scripts).",
        "capabilities": [
          "shell:execute",
          "filesystem:write"
        ],
        "severity": "medium"
      }
    ]
  }
}