Week 45, updated 2 Nov 2026

Agent skills & MCP Superpowers

Is Superpowers safe?

Short answer: No issues in the code checks, but dependencies were not checked. StackGrade's weekly scan of obra/superpowers found no issues in the code and agent instruction files of the public repo, but there was no dependency list to check: osv-scanner found no runtime lockfile or package manifest, so the label is “No dependencies scanned”, not a passed dependency check. Automated scan of commit 2ce8aa1 on 2 Nov 2026, not a manual audit.

Updated : the last week its score, rank or safety result changed.

A skills framework and software-development methodology for coding agents.

  • 310,769 stars
  • pushed 29 Oct
  • MIT
  • Shell

github.com/obra/superpowers

62score out of 100

#13of 52 overall#1in Agent skills & MCPsame score as Week 44

  • Maintenance 30%22
  • Adoption 30%98
  • Docs 20%69
  • Community 20%–
W42W43W44W45

Score over the last 4 weeks: 66, 64, 62, 62.

No dependencies scanned

Code checks clean. No runtime lockfile or manifest, so dependencies could not be checked.

How this score works

Each part is a percentile among all 52 tracked tools, so 50 is average for this list. Community is not measured yet; the score uses the other 80%.

  • Maintenance: Last push 29 Oct 2026. Last 10 GitHub releases within 127 days (about 2.1 per 30 days), latest release 21 Oct 2026. Median 138.2 h to close an issue (5 closed issues).
  • Adoption: 310,769 stars (70%), 27,654 forks (30%).
  • Docs: README 14,835 characters, 31 headings, 28 code blocks, install section: yes.

Methodology

#1 of 9 in Agent skills & MCP

Ranked by score. The yellow row is this tool.

Agent skills & MCP, Week 45score 0–100, safety
  1. 1Superpowers#13 overall62No dependencies scanned
  2. 2Context7#19 overall57Caution
  3. 3Agent Skills#25 overall53No issues found
  4. 4MCP reference servers#29 overall48No issues found
  5. 5awesome-mcp-servers#30 overall47No dependencies scanned
  6. 6Playwright MCP#32 overall45No issues found
Show the other 3
  1. 7wshobson/agents#38 overall42No issues found
  2. 8GitHub MCP Server#40 overall41No issues found
  3. 9skill-recorder#52 overall22No issues found

Safety scan, 2 Nov 2026

Automated scan of commit 2ce8aa1, 207 files. Not a manual audit.

No dependencies scanned

  • –DependenciesNo runtime lockfile or manifest, so nothing to check.
  • 0Install hooksNo npm install scripts found.
  • 0Remote-code patternsFor example eval(fetch(…)).
  • 78Agent files checked0 phrases flagged for review.
  • 0curl | sh installersIn docs or program code. Information only.
Why this label?

No issues found by the code checks. osv-scanner only found 1 dev/test/docs manifest, no runtime dependencies to check. So “no issues” here does not cover dependencies.

Known vulnerabilities in runtime dependencies (OSV): 0 critical, 0 high, 0 medium, 0 low

Automated scan of commit 2ce8aa1 on 2 Nov 2026, not a manual audit. 207 files checked. What we check

Repo activity

From the GitHub API, fetched 2 Nov 2026.

  • 5Releases, 90 daysLatest v7.0.1, 21 Oct
  • 6dMedian issue closeOver 5 closed issues
  • 311kStars+5,598 since 26 Oct
  • 27.7kForks377 open issues
  • 2025Repo created9 Oct 2025
30 days ago2 Nov
2 releases in the last 30 days, one mark each (GitHub releases feed, last 10 entries).

2 releases in the last 30 days (GitHub releases feed, last 10 entries):

Questions about Superpowers

Answers use this week's StackGrade data.

Is Superpowers safe to use?

No issues in the code checks, but dependencies were not checked. StackGrade's weekly scan of obra/superpowers found no issues in the code and agent instruction files of the public repo, but there was no dependency list to check: osv-scanner found no runtime lockfile or package manifest, so the label is “No dependencies scanned”, not a passed dependency check. Automated scan of commit 2ce8aa1 on 2 Nov 2026, not a manual audit.

How does StackGrade score Superpowers?

Superpowers scores 62 out of 100 in Week 45: #13 of 52 tracked tools overall and #1 in Agent skills & MCP. The score combines maintenance (22), adoption (98) and docs (69) as percentiles among all 52 tracked tools; community (20% weight) is not measured yet, so the score uses the other 80%. It is not a hands-on test and it is separate from the safety label.

What are the alternatives to Superpowers?

The highest-scored other tools in Agent skills & MCP this week: Context7 (57, Caution), Agent Skills (53, No issues found), MCP reference servers (48, No issues found), awesome-mcp-servers (47, No dependencies scanned). StackGrade has not tested them hands-on.

What licence does Superpowers use?

The licence listed for obra/superpowers is MIT. Read the licence text before commercial use.

Compare and use it

All facts and sources
Type
Agent skill
License
MIT
Language
Shell
Created
9 Oct 2025
Owner
obra (User)
Forks
27,654

GitHub description: “An agentic skills framework & software development methodology that works.”

Sources: github.com/obra/superpowers, api.github.com/repos/obra/superpowers, raw.githubusercontent.com/obra/superpowers/main/README.md. Fetched 2 Nov 2026.

Know when Superpowers changes label

One email a week: the new top 10, the biggest score changes and every safety label that changed.

Free. Double opt-in: you confirm by email first, unsubscribe in one click.