{"id":"cmt1v1ao17uwoad09m5heibig","owner":"obra","name":"superpowers","url":"https://github.com/obra/superpowers","lastScannedAt":"2026-10-21T23:05:37.835Z","freshness":{"status":"changed","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:35:39.571Z","lastVerifiedAt":"2026-09-10T22:25:16.701Z","lastChangeDetectedAt":"2026-10-22T03:35:39.571Z","scannedHash":null,"latestUpstreamHash":"2ce8aa15d05bd57213e6f746f953aafb7ded7a8b","nextCheckDueAt":"2026-10-23T04:39:15.029Z"},"skills":[{"id":"cmv29t0awd32qad06nad8g3ym","slug":"requesting-code-review","publicId":"302beeb9-ffab-4a8f-aaab-892f3e04e856","name":"requesting-code-review","description":"Use when completing tasks, implementing major features, or before merging to verify work meets requirements","author":"","version":"","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-20T18:35:08.010Z","sourceUrl":"https://github.com/obra/superpowers/tree/main/skills/requesting-code-review","findings":[{"id":"cmv29t0awd32rad06xa203mxf","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T13:56:58.402Z","lastVerifiedAt":"2026-10-21T13:56:58.402Z","lastChangeDetectedAt":"2026-10-10T10:45:29.352Z","scannedHash":"f4a6749898702895ea4fd57c7f186cf43205b99a","latestUpstreamHash":"f4a6749898702895ea4fd57c7f186cf43205b99a","nextCheckDueAt":"2026-10-22T14:34:09.094Z"}},{"id":"cmv1vg1ehd01kad06uzxy8wh7","slug":"systematic-debugging","publicId":"825977fa-9d68-440f-a832-c4ff7f5f4ae5","name":"systematic-debugging","description":"Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes","author":"","version":"","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-20T18:35:07.998Z","sourceUrl":"https://github.com/obra/superpowers/tree/main/skills/systematic-debugging","findings":[{"id":"cmv1vg1eid01lad06dvv8ws0m","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T09:41:39.037Z","lastVerifiedAt":"2026-10-21T09:41:39.037Z","lastChangeDetectedAt":"2026-10-10T06:06:05.024Z","scannedHash":"108961c080a6837ad8a188a553e593cc5e6df62d","latestUpstreamHash":"108961c080a6837ad8a188a553e593cc5e6df62d","nextCheckDueAt":"2026-10-22T11:39:47.071Z"}},{"id":"cmviq0azl1jhdad07azm3qi3w","slug":"brainstorming","publicId":"2783a765-f4ca-483a-add1-fb41ce11ebc4","name":"brainstorming","description":"You MUST use this before any creative work - creating features, building components, adding functionality, modifying behavior, or planning anything new, in software or out of it (a talk, a business, a renovation).","author":"","version":"","license":"MIT","overallGrade":"F","badgeStatus":"flagged","publishedAt":"2026-08-20T18:35:07.937Z","sourceUrl":"https://github.com/obra/superpowers/tree/main/skills/brainstorming","findings":[{"id":"cmviq0azl1jhead07clnxf5ld","source":"vettd","category":"security","label":"Shell execution without sandboxing","detail":"Detected in scripts/server.cjs:537 — `const cp = require('child_process');`","severity":"critical","ruleId":"VTD-0018"},{"id":"cmviq0azl1jhfad07wj6ft55j","source":"vettd","category":"security","label":"High-entropy value — potential hardcoded secret","detail":"Detected in scripts/start-server.sh:121 — `BRAINSTORM_TOKEN_FILE = [REDACTED]`","severity":"critical","ruleId":"VTD-0003"},{"id":"cmviq0azl1jhgad07bjo3bhyw","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmviq0azl1jhhad07fnfammke","source":"cisco","category":"security","label":"Node.js filesystem access candidate for sensitive-flow correlation","detail":"scripts/server.cjs:93 — Pattern detected: fs.readFileSync(","severity":"low","ruleId":"DATA_EXFIL_JS_FS_ACCESS"},{"id":"cmviq0azm1jhiad07a1si16r2","source":"cisco","category":"security","label":"Script contacts a destination the documentation never mentions","detail":"scripts/server.cjs:106 — Script contacts or configures 'primeradiant.com' but the skill documentation never visibly mentions it. Undocumented network destinations can indicate behaviour the manifest and description do not disclose.","severity":"low","ruleId":"UNDECLARED_NETWORK_DESTINATION"},{"id":"cmviq0azm1jhjad07e6mrsrfc","source":"cisco","category":"security","label":"Node.js filesystem access candidate for sensitive-flow correlation","detail":"scripts/server.cjs:138 — Pattern detected: fs.readFileSync(","severity":"low","ruleId":"DATA_EXFIL_JS_FS_ACCESS"},{"id":"cmviq0azm1jhkad07u30lq4d1","source":"cisco","category":"security","label":"Node.js filesystem access candidate for sensitive-flow correlation","detail":"scripts/server.cjs:202 — Pattern detected: fs.readFileSync(","severity":"low","ruleId":"DATA_EXFIL_JS_FS_ACCESS"},{"id":"cmviq0azm1jhlad07wq05ry75","source":"cisco","category":"security","label":"Node.js filesystem access candidate for sensitive-flow correlation","detail":"scripts/server.cjs:203 — Pattern detected: fs.readFileSync(","severity":"low","ruleId":"DATA_EXFIL_JS_FS_ACCESS"},{"id":"cmviq0azm1jhmad076zly291r","source":"cisco","category":"security","label":"Node.js filesystem access candidate for sensitive-flow correlation","detail":"scripts/server.cjs:217 — Pattern detected: fs.readFileSync(","severity":"low","ruleId":"DATA_EXFIL_JS_FS_ACCESS"},{"id":"cmviq0azm1jhnad0776xrhnee","source":"cisco","category":"security","label":"Node.js filesystem access candidate for sensitive-flow correlation","detail":"scripts/server.cjs:409 — Pattern detected: fs.readFileSync(","severity":"low","ruleId":"DATA_EXFIL_JS_FS_ACCESS"},{"id":"cmviq0azm1jhoad07aq4y0b68","source":"cisco","category":"security","label":"Node.js filesystem access candidate for sensitive-flow correlation","detail":"scripts/server.cjs:433 — Pattern detected: fs.readFileSync(","severity":"low","ruleId":"DATA_EXFIL_JS_FS_ACCESS"},{"id":"cmviq0azm1jhpad07roz8j1dp","source":"cisco","category":"security","label":"Node.js filesystem access candidate for sensitive-flow correlation","detail":"scripts/server.cjs:515 — Pattern detected: fs.appendFileSync(","severity":"low","ruleId":"DATA_EXFIL_JS_FS_ACCESS"},{"id":"cmviq0azm1jhqad07fkfgrtha","source":"cisco","category":"security","label":"Node.js child_process module usage for shell command execution","detail":"scripts/server.cjs:537 — Pattern detected: require('child_process')","severity":"critical","ruleId":"COMMAND_INJECTION_JS_CHILD_PROCESS"},{"id":"cmviq0azm1jhrad078perzcx1","source":"cisco","category":"security","label":"Node.js filesystem access candidate for sensitive-flow correlation","detail":"scripts/server.cjs:620 — Pattern detected: fs.writeFileSync(","severity":"low","ruleId":"DATA_EXFIL_JS_FS_ACCESS"},{"id":"cmviq0azm1jhsad0751z41d5a","source":"cisco","category":"security","label":"Node.js filesystem access candidate for sensitive-flow correlation","detail":"scripts/server.cjs:673 — Pattern detected: fs.writeFileSync(","severity":"low","ruleId":"DATA_EXFIL_JS_FS_ACCESS"},{"id":"cmviq0azm1jhtad073t0phj78","source":"cisco","category":"security","label":"Node.js filesystem access candidate for sensitive-flow correlation","detail":"scripts/server.cjs:676 — Pattern detected: fs.writeFileSync(","severity":"low","ruleId":"DATA_EXFIL_JS_FS_ACCESS"},{"id":"cmviq0azm1jhuad076zln6gab","source":"cisco","category":"security","label":"Node.js filesystem access candidate for sensitive-flow correlation","detail":"scripts/server.cjs:688 — Pattern detected: fs.writeFileSync(","severity":"low","ruleId":"DATA_EXFIL_JS_FS_ACCESS"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"F","criticalCount":2,"highCount":2},{"source":"cisco","status":"success","verdict":null,"grade":"F","criticalCount":1,"highCount":1}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:05:38.289Z","lastVerifiedAt":"2026-10-21T23:05:38.289Z","lastChangeDetectedAt":"2026-10-21T23:05:06.833Z","scannedHash":"3d8a23691e919f5acfd31d45f76bdc168d24ca1b","latestUpstreamHash":"3d8a23691e919f5acfd31d45f76bdc168d24ca1b","nextCheckDueAt":"2026-10-22T20:42:41.610Z"}},{"id":"cmuxm13is205dad07tagw093j","slug":"test-driven-development","publicId":"1cdf5811-a957-41ac-8a0e-ef0274620c59","name":"test-driven-development","description":"Use when implementing any feature or bugfix, before writing implementation code","author":"","version":"","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-20T18:35:07.721Z","sourceUrl":"https://github.com/obra/superpowers/tree/main/skills/test-driven-development","findings":[{"id":"cmuxm13is205ead07oywq9l23","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T20:21:08.377Z","lastVerifiedAt":"2026-10-21T20:21:08.377Z","lastChangeDetectedAt":"2026-09-24T01:55:16.451Z","scannedHash":"847144cf0824095922c0d4875648b9fa74877e1a","latestUpstreamHash":"847144cf0824095922c0d4875648b9fa74877e1a","nextCheckDueAt":"2026-10-22T21:06:15.437Z"}},{"id":"cmvinjkpm1iz7ad07z0nc3ary","slug":"writing-skills","publicId":"55b548d1-12f6-418c-8573-0c3c4af44477","name":"writing-skills","description":"Use when creating new skills, editing existing skills, or verifying skills work before deployment","author":"","version":"","license":"MIT","overallGrade":"F","badgeStatus":"flagged","publishedAt":"2026-08-20T18:35:07.716Z","sourceUrl":"https://github.com/obra/superpowers/tree/main/skills/writing-skills","findings":[{"id":"cmvinjkpm1iz8ad0720y5df45","source":"vettd","category":"security","label":"Shell execution without sandboxing","detail":"Detected in render-graphs.js:18 — `import { execFileSync } from 'child_process';`","severity":"critical","ruleId":"VTD-0018"},{"id":"cmvinjkpm1iz9ad07c1pvykoh","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088"},{"id":"cmvinjkpm1izaad070thoebp3","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"},{"id":"cmvinjkpm1izbad07akel32vi","source":"cisco","category":"security","label":"Node.js child_process module usage for shell command execution","detail":"render-graphs.js:18 — Pattern detected: from 'child_process'","severity":"critical","ruleId":"COMMAND_INJECTION_JS_CHILD_PROCESS"},{"id":"cmvinjkpm1izcad073be2c5vp","source":"cisco","category":"security","label":"Node.js filesystem access candidate for sensitive-flow correlation","detail":"render-graphs.js:121 — Pattern detected: fs.readFileSync(","severity":"low","ruleId":"DATA_EXFIL_JS_FS_ACCESS"},{"id":"cmvinjkpm1izdad07ct31yfng","source":"cisco","category":"security","label":"Node.js filesystem access candidate for sensitive-flow correlation","detail":"render-graphs.js:142 — Pattern detected: fs.writeFileSync(","severity":"low","ruleId":"DATA_EXFIL_JS_FS_ACCESS"},{"id":"cmvinjkpm1izead071v1zo4li","source":"cisco","category":"security","label":"Node.js filesystem access candidate for sensitive-flow correlation","detail":"render-graphs.js:147 — Pattern detected: fs.writeFileSync(","severity":"low","ruleId":"DATA_EXFIL_JS_FS_ACCESS"},{"id":"cmvinjkpm1izfad07ipywgpl7","source":"cisco","category":"security","label":"Node.js filesystem access candidate for sensitive-flow correlation","detail":"render-graphs.js:158 — Pattern detected: fs.writeFileSync(","severity":"low","ruleId":"DATA_EXFIL_JS_FS_ACCESS"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"F","criticalCount":1,"highCount":1},{"source":"cisco","status":"success","verdict":null,"grade":"F","criticalCount":1,"highCount":1}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T21:56:38.491Z","lastVerifiedAt":"2026-10-21T21:56:38.491Z","lastChangeDetectedAt":"2026-10-21T21:53:03.505Z","scannedHash":"660ede63b84ce5d07ef28cccc2973165e2ca06e2","latestUpstreamHash":"660ede63b84ce5d07ef28cccc2973165e2ca06e2","nextCheckDueAt":"2026-10-22T22:22:45.463Z"}},{"id":"cmv1wer6yd0byad06ywci1z8h","slug":"subagent-driven-development","publicId":"1a297c66-8bd3-41c7-9000-96e88ea81e03","name":"subagent-driven-development","description":"Use when executing implementation plans with independent tasks in the current session","author":"","version":"","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-20T18:35:07.708Z","sourceUrl":"https://github.com/obra/superpowers/tree/main/skills/subagent-driven-development","findings":[{"id":"cmv1wer6yd0bzad061c2awquo","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T15:00:58.433Z","lastVerifiedAt":"2026-10-21T15:00:58.433Z","lastChangeDetectedAt":"2026-10-10T04:34:05.020Z","scannedHash":"a9ec528b252e536a404fd0522e32cec31094d669","latestUpstreamHash":"a9ec528b252e536a404fd0522e32cec31094d669","nextCheckDueAt":"2026-10-22T15:55:52.005Z"}},{"id":"cmv2a0pvfd358ad064kl2mip5","slug":"executing-plans","publicId":"cbbda007-2435-48b0-9bbf-ea5124c6b6b9","name":"executing-plans","description":"Use when executing an implementation plan in the current session as the implementer yourself — your human partner chose inline execution, or no subagent tool is available","author":"","version":"","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-20T18:35:07.037Z","sourceUrl":"https://github.com/obra/superpowers/tree/main/skills/executing-plans","findings":[{"id":"cmv2a0pvfd359ad060z5d0xd3","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T08:53:15.935Z","lastVerifiedAt":"2026-10-21T08:53:15.935Z","lastChangeDetectedAt":"2026-10-10T10:53:29.365Z","scannedHash":"ef38c6c33e88e4248018dab6f03fc1ceda916ba0","latestUpstreamHash":"ef38c6c33e88e4248018dab6f03fc1ceda916ba0","nextCheckDueAt":"2026-10-22T07:51:26.878Z"}},{"id":"cmuxm13qp205mad07ut9k8llp","slug":"writing-plans","publicId":"fc3d3852-d91f-462b-b5da-cfb3c97092ac","name":"writing-plans","description":"Use when you have a spec or requirements for a multi-step task, before touching code","author":"","version":"","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-20T18:35:07.034Z","sourceUrl":"https://github.com/obra/superpowers/tree/main/skills/writing-plans","findings":[{"id":"cmuxm13qp205nad07msj11ccz","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T05:18:13.470Z","lastVerifiedAt":"2026-10-21T05:18:13.470Z","lastChangeDetectedAt":"2026-10-09T06:02:28.933Z","scannedHash":"cc97fa00eb2ccd4f283e34eb2ba06a48e1e679f7","latestUpstreamHash":"cc97fa00eb2ccd4f283e34eb2ba06a48e1e679f7","nextCheckDueAt":"2026-10-22T05:02:47.971Z"}},{"id":"cmuxmc29t2myiad07okxk8s80","slug":"finishing-a-development-branch","publicId":"c3b24f74-bacf-4356-aec7-0ef272be72ee","name":"finishing-a-development-branch","description":"Use when implementation is complete, all tests pass, and you need to decide how to integrate the work","author":"","version":"","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-20T18:35:07.031Z","sourceUrl":"https://github.com/obra/superpowers/tree/main/skills/finishing-a-development-branch","findings":[{"id":"cmuxmc29t2myjad07itu2ps1n","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T23:22:06.855Z","lastVerifiedAt":"2026-10-21T23:22:06.855Z","lastChangeDetectedAt":null,"scannedHash":"3b1205aa5038c71946077dd63b9e71b447729e70","latestUpstreamHash":"3b1205aa5038c71946077dd63b9e71b447729e70","nextCheckDueAt":"2026-10-23T01:14:06.496Z"}},{"id":"cmuxmc2cf2mz8ad07pf57cevx","slug":"using-git-worktrees","publicId":"fe91cd5f-3137-4d7c-b7de-27ed5ac04d28","name":"using-git-worktrees","description":"Use when starting feature work that needs isolation from current workspace or before executing implementation plans - ensures an isolated workspace exists via native tools or git worktree fallback","author":"","version":"","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-20T18:35:07.017Z","sourceUrl":"https://github.com/obra/superpowers/tree/main/skills/using-git-worktrees","findings":[{"id":"cmuxmc2cf2mz9ad077h072ckb","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:53:39.587Z","lastVerifiedAt":"2026-10-22T03:53:39.587Z","lastChangeDetectedAt":null,"scannedHash":"d2b8357b922667a091bfe967840abf5ae84ce99c","latestUpstreamHash":"d2b8357b922667a091bfe967840abf5ae84ce99c","nextCheckDueAt":"2026-10-23T02:24:26.170Z"}},{"id":"cmuxo6phy2x42ad07h8x1nmbu","slug":"verification-before-completion","publicId":"2cb4c522-d826-429f-b0e4-07e259981631","name":"verification-before-completion","description":"Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions always","author":"","version":"","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-20T18:35:07.015Z","sourceUrl":"https://github.com/obra/superpowers/tree/main/skills/verification-before-completion","findings":[{"id":"cmuxo6phy2x43ad07wc2hhfo8","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T06:35:13.619Z","lastVerifiedAt":"2026-10-21T06:35:13.619Z","lastChangeDetectedAt":null,"scannedHash":"a4cb0b69aaefeab540947a7f1642bdaad810e37a","latestUpstreamHash":"a4cb0b69aaefeab540947a7f1642bdaad810e37a","nextCheckDueAt":"2026-10-22T07:07:38.733Z"}},{"id":"cmuxm14tl206had07e2tkgqdy","slug":"using-superpowers","publicId":"e50a5ad7-03a1-4011-9ebb-4d277e925f13","name":"using-superpowers","description":"Use when starting any conversation - establishes how to find and use skills, requiring skill invocation before ANY response including clarifying questions","author":"","version":"","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-20T18:35:07.013Z","sourceUrl":"https://github.com/obra/superpowers/tree/main/skills/using-superpowers","findings":[{"id":"cmuxm14tl206iad07u1wvsgi3","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:30:39.568Z","lastVerifiedAt":"2026-10-22T03:30:39.568Z","lastChangeDetectedAt":"2026-09-25T22:11:08.251Z","scannedHash":"4c777432715fe58984d212a36aedc6a18472e512","latestUpstreamHash":"4c777432715fe58984d212a36aedc6a18472e512","nextCheckDueAt":"2026-10-23T02:41:18.718Z"}},{"id":"cmuxm8l1x2el6ad075vt9yfx8","slug":"dispatching-parallel-agents","publicId":"397d7159-5b76-4fb5-bf90-7555334f3465","name":"dispatching-parallel-agents","description":"Use when facing 2+ independent tasks that can be worked on without shared state or sequential dependencies","author":"","version":"","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-20T18:35:07.011Z","sourceUrl":"https://github.com/obra/superpowers/tree/main/skills/dispatching-parallel-agents","findings":[{"id":"cmuxm8l1x2el7ad07uptgocmi","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T03:54:39.589Z","lastVerifiedAt":"2026-10-22T03:54:39.589Z","lastChangeDetectedAt":null,"scannedHash":"15697cb0726c26a66bff737494e8b5266667ba0c","latestUpstreamHash":"15697cb0726c26a66bff737494e8b5266667ba0c","nextCheckDueAt":"2026-10-23T03:28:55.826Z"}},{"id":"cmuxm1ibl20qmad07gty6ryii","slug":"receiving-code-review","publicId":"8a8d2d2e-eb9d-4b2b-87ff-1869cc233d3a","name":"receiving-code-review","description":"Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation","author":"","version":"","license":"MIT","overallGrade":"A","badgeStatus":"vettd","publishedAt":"2026-08-20T18:35:07.009Z","sourceUrl":"https://github.com/obra/superpowers/tree/main/skills/receiving-code-review","findings":[{"id":"cmuxm1ibl20qnad07gmdw8ua2","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE"}],"scannerRuns":[{"source":"vettd","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0},{"source":"cisco","status":"success","verdict":null,"grade":"A","criticalCount":0,"highCount":0}],"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T06:45:13.633Z","lastVerifiedAt":"2026-10-21T06:45:13.633Z","lastChangeDetectedAt":null,"scannedHash":"b5e154fc3ec7a6a0b1e710eebacc2168620cc428","latestUpstreamHash":"b5e154fc3ec7a6a0b1e710eebacc2168620cc428","nextCheckDueAt":"2026-10-22T04:58:35.315Z"}}],"publisherSupplied":["skills[].name","skills[].description","skills[].author","skills[].version","skills[].license"]}