← Back to Skills Marketplace
19145
Downloads
18
Stars
150
Active Installs
1
Versions
Install in OpenClaw
/install superpowers
Description
Spec-first, TDD, subagent-driven software development workflow. Use when: (1) building any new feature or app — triggers brainstorm → plan → subagent executi...
Usage Guidance
Install this if you want a strict coding workflow that may run tests, create commits, spawn subagents, and help merge or open PRs. Review generated plans, commands, diffs, branch names, and PR text before execution, and do not put secrets or private credentials into plan files or subagent prompts.
Capability Analysis
Type: OpenClaw Skill
Name: superpowers
Version: 1.0.0
This skill bundle is suspicious due to its extensive use of powerful execution capabilities (`exec`, `sessions_spawn`) and dynamic command generation. Files like `SKILL.md`, `references/finishing-branch.md`, and `references/writing-plans.md` instruct the agent to construct and execute various shell commands (`git`, `gh`, `pytest`, `pnpm test`, `cargo test`, `go test`) using potentially user-controlled input (e.g., branch names, PR titles). This creates a significant risk of prompt injection and shell injection if user input is not rigorously sanitized, allowing an attacker to execute arbitrary commands or manipulate sub-agent behavior. While the skill's stated purpose is legitimate software development, the inherent power and lack of explicit input sanitization for command construction elevate it beyond benign.
Capability Assessment
Purpose & Capability
The skill’s use of shell commands, tests, commits, GitHub PR creation, and subagents fits its stated purpose: spec-first, TDD, subagent-driven software development.
Instruction Scope
The activation phrases are broad, but the artifact narrows the skill to coding tasks, excludes non-code tasks and one-liner fixes, and includes gates for design approval, execution-mode choice, and branch-finish decisions.
Install Mechanism
The bundle contains only Markdown instruction files and metadata; there are no executable scripts, install hooks, dependency installers, or credential setup steps.
Credentials
Reading project context, writing plan files, running tests, and passing scoped task context to subagents are proportionate for the advertised development workflow, though users should avoid including secrets in prompts or plans.
Persistence & Privilege
The skill can guide persistent repository changes such as commits, merges, pushes, PR creation, and branch deletion, but these actions are disclosed and generally user-directed; destructive branch discard requires explicit confirmation.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install superpowers - After installation, invoke the skill by name or use
/superpowers - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial port of obra/superpowers for OpenClaw — spec-first, TDD, subagent-driven development workflow
Metadata
Frequently Asked Questions
What is Superpowers Dev Workflow?
Spec-first, TDD, subagent-driven software development workflow. Use when: (1) building any new feature or app — triggers brainstorm → plan → subagent executi... It is an AI Agent Skill for Claude Code / OpenClaw, with 19145 downloads so far.
How do I install Superpowers Dev Workflow?
Run "/install superpowers" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Superpowers Dev Workflow free?
Yes, Superpowers Dev Workflow is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Superpowers Dev Workflow support?
Superpowers Dev Workflow is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Superpowers Dev Workflow?
It is built and maintained by wlshlad85 (@wlshlad85); the current version is v1.0.0.
More Skills