Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/naimkatiman/continuous-improvementnpx agentmods add skills/naimkatiman/continuous-improvement/superpowersWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/naimkatiman/continuous-improvement/superpowers)<a href="https://agentmods.dev/skills/naimkatiman/continuous-improvement/superpowers"><img src="https://agentmods.dev/badge/skills/naimkatiman/continuous-improvement/superpowers/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/naimkatiman/continuous-improvement/superpowers"><img src="https://agentmods.dev/badge/skills/naimkatiman/continuous-improvement/superpowers.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00140 | $0.04862 |
| Opus 5.5 | $0.00056 | $0.01945 |
| Sonnet 5.5 | $0.00028 | $0.00972 |
| Haiku 4.5 | $0.00014 | $0.00486 |
Grade B, and why
superpowers scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
Add a `continuous_improvement.companion_preference` key to `~/.claude/settings.json`: How it starts
The opening of the file, as written. The whole thing — 293 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Superpowers — Mandatory Agent Workflows (Four-Source Dispatcher)
Superpowers enforces a structured development workflow. Skills activate automatically when their trigger conditions are met. This is not optional guidance — it is mandatory workflow.
Philosophy
AI agents skip steps, guess, and declare "done" without verifying. Superpowers blocks this by making workflow stages explicit and enforced.
What changed in v3.8.0
The dispatcher now routes across four registered marketplaces instead of relying on Obra installed separately. All four are installable from one marketplace entry:
/plugin install superpowers@continuous-improvement # Obra's 14 workflow skills
/plugin install agent-skills@continuous-improvement # Addy's 21 SDLC skills
/plugin install ruflo-swarm@continuous-improvement # Agent swarm + Monitor stream
/plugin install oh-my-claudecode@continuous-improvement # 38 skills + 19 agents
The CI plugin (this dispatcher + tdd-workflow, verification-loop, gateguard, ralph, deploy-receipt, etc.) installs by default. The four companions are opt-in — install only what you need.
Product-management coverage (PRD, OKRs, personas, GTM, etc.) is provided by phuryn/pm-skills via an out-of-band Claude Code marketplace install:
claude plugin marketplace add phuryn/pm-skills
claude plugin install pm-toolkit@pm-skills
claude plugin install pm-product-strategy@pm-skills
claude plugin install pm-product-discovery@pm-skills
claude plugin install pm-market-research@pm-skills
claude plugin install pm-data-analytics@pm-skills
claude plugin install pm-marketing-growth@pm-skills
claude plugin install pm-go-to-market@pm-skills
claude plugin install pm-execution@pm-skills
See docs/THIRD_PARTY.md for plugin-by-plugin scope.
The Basic Workflow
| Order | Skill | When It Activates |
|---|---|---|
| 1 | brainstorming | Before writing code. Classifies the request as spike, bounded or architectural, then scales the ceremony to it: a 2-3 sentence probe, a short design in chat, or questions plus alternatives plus a sectioned design and a written spec. Approval is required before implementation on all three paths. |
| 2 | using-git-worktrees | After design approval. Creates isolated workspace on new branch, runs project setup, verifies clean test baseline. |
| 3 | writing-plans | With approved design. Breaks work into bite-sized tasks (2-5 minutes each). Every task has exact file paths, complete code, verification steps. |
| 4 | subagent-driven-development or executing-plans | With plan. Dispatches fresh subagent per task with two-stage review (spec compliance, then code quality), or executes in batches with human checkpoints. |
| 5 | test-driven-development | During implementation. Enforces RED-GREEN-REFACTOR: write failing test, watch it fail, write minimal code, watch it pass, commit. Deletes code written before tests. |
| 6 | requesting-code-review | Between tasks. Reviews against plan, reports issues by severity. Critical issues block progress. |
| 7 | finishing-a-development-branch | When tasks complete. Verifies tests, presents options (merge/PR/keep/discard), cleans up worktree. |
| 8 | deploy-receipt | When the deploy branch auto-deploys (Railway / Cloudflare Workers / Vercel / Netlify / Fly.io / etc.). Verifies deployed SHA matches merge SHA and healthcheck returns 200. Until the receipt is COMPLETE the merge is not reported as done. |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · -1 lines c8f69c445e02
- 1mo ago First seen · 294 lines · 140 tokens per session scan B 65497252a0ec
superpowers is a skill published in the GitHub repository naimkatiman/continuous-improvement (9 stars, last pushed 1mo ago), licensed MIT. It adds 140 tokens to every session and 4,862 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
ap-policies
Attach a completion policy gate (shell check or judge-agent rubric) to a session or fan-in group so turn-end only passes when the gate is green, then optionally auto-commit pending human ack. Use when the user says "gate this session on tests passing", "attach a policy", "commit only if tests are green", "judge…
kotlin-testing
Kotlin testing patterns with Kotest, MockK, coroutine testing, property-based testing, and Kover coverage. Follows TDD methodology with idiomatic Kotlin practices.
test-driven-development
TDD: enforce RED-GREEN-REFACTOR, tests before code.
cpp-testing
Use only when writing/updating/fixing C++ tests, configuring GoogleTest/CTest, diagnosing failing or flaky tests, or adding coverage/sanitizers.
rust-testing
Rust testing patterns including unit tests, integration tests, async testing, property-based testing, mocking, and coverage. Follows TDD methodology.
resolve-author-fix
Find the root cause, implement a focused fix, and prove behavior with targeted tests and recordings.