A security-hardened fork of obra/superpowers — a complete software development workflow for AI coding agents built on composable skills.

This fork applies the following security changes on top of upstream:

• Removed authority-escalation markup patterns from injected context
• Added stricter hook and path validation
• Added scope and data-handling constraints for subagent review prompts
• Excluded brainstorming browser server components and other non-essential attack surface

For details on how Superpowers works (workflow, philosophy, skills library, contributing), see the upstream README.

Installation differs by platform. All commands below point to this fork (garrettsiegel/superpowers).

Tell Copilot:

Fetch and follow instructions from https://raw.githubusercontent.com/garrettsiegel/superpowers/refs/heads/main/.copilot/INSTALL.md

Or install locally:

git clone https://github.com/garrettsiegel/superpowers.git ~/.copilot/superpowers
~/.copilot/superpowers/.copilot/install.sh /path/to/your/repo

Detailed docs: .copilot/INSTALL.md

/plugin marketplace add garrettsiegel/superpowers
/plugin install superpowers@superpowers

/add-plugin superpowers

Then search for "superpowers" and select this fork if prompted.

Fetch and follow instructions from https://raw.githubusercontent.com/garrettsiegel/superpowers/refs/heads/main/.codex/INSTALL.md

Fetch and follow instructions from https://raw.githubusercontent.com/garrettsiegel/superpowers/refs/heads/main/.opencode/INSTALL.md

gemini extensions install https://github.com/garrettsiegel/superpowers

Start a new session and ask for something that should trigger a skill (e.g., "help me plan this feature"). The agent should invoke the relevant skill automatically, or load the skill file on platforms without a native Skill tool.

Pull the latest from this fork. Symlink-based installs pick up changes automatically.

cd ~/.copilot/superpowers && git pull   # Copilot / Codex

For plugin-based platforms:

/plugin update superpowers              # Claude Code
gemini extensions update superpowers    # Gemini CLI

• Upstream repo: obra/superpowers
• Upstream community / Discord: discord.gg/Jd8Vphy9jq
• Blog post: Superpowers for Claude Code

MIT — see LICENSE for details.