Confirm the source
Compare the repository, publisher, and installation command before continuing.
×
Third-party audit
High riskGen Agent Trust Hub
infsh-cli · magentosh/superpowers
Provider summary
The skill facilitates the installation and use of the 'belt' command-line interface from a third-party service. The primary security concerns include a high-risk installation method (piping a remote script to the shell), the exfiltration of local files to external servers during app execution, and a vulnerability to indirect prompt injection through external tool outputs.
The provider classified the analyzed snapshot as HIGH risk. This result applies to the content available at audit time.
- Provider
- Gen Agent Trust Hub
- Normalized result
- fail
- Risk level
- HIGH
- Audited
- Aug 28, 2026
How to use this signal
Read the content
Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.
Limit permissions
Use the narrowest possible scope and avoid broad credentials for third-party skills.