mrkeyoor.com_
Tue 15 Sept 23:57 UTC
AI Toolsevaluationupdated 27 Aug 2026

superpowers review

Superpowers is a set of instructions and reusable skills that pushes coding agents through design, planning, test-first implementation, review, and verification. It tries to make an agent follow a repeatable engineering process instead of improvising changes from a short prompt.

+2,838stars / 7d
Verdict

Our Superpowers install added 0 packages in 12 seconds and npm audit found 0 known vulnerabilities, but there was no build or test target to verify. Use it if design approval, TDD, worktrees, and staged review already match how you want agents to behave. Skip it when that ceremony would cost more than the code change.

We ran it

Lab card: what happened when we ran superpowersScreenshot of superpowers (github.com/obra/superpowers)
Install✓ · 12s0 packages · 4 MB
Buildn/ano build script
Testsn/ano test script
Known vulns00 critical · 0 high · 0 moderate · 0 low (npm audit)
Repo194 files~11,856 lines of source · 1.7 MB · 0 CI workflows · tests dir

Answers from our run

Does superpowers build from source?

Dependencies installed in 12 seconds (0 packages), and the project has no separate build step. We cloned commit b36e082 into a clean Debian container with 3 CPUs and no project-specific setup.

Does superpowers have tests you can run?

Not through a standard command: the project exposes no test script or target that our harness could run.

Does superpowers have known vulnerabilities in its dependencies?

npm audit found none in the dependency tree at the time of our run.

Who should not use superpowers?

Developers who want immediate edits from a small request: the workflow can brainstorm, seek approval, create a plan, and set up a worktree first.

What are the alternatives to superpowers?

Spec Kit, BMAD Method, Anthropic Skills. Our Superpowers install added 0 packages in 12 seconds and npm audit found 0 known vulnerabilities, but there was no build or test target to verify.

Setup4/512-second install with 0 packages; setup varies by agent
Docs4/5Clear workflow and per-agent installation instructions
Community5/5278,160 stars and 319 open issues and pull requests
Maturity3/5v6.3.0 is active, but our checkout exposed no test target

Discussed on

  1. hnSuperpowers5 points
  2. hnSuperPowers: Agentic skills framework that works4 points
  3. hnSuperpowers – An agentic skills framework for Claude Code, Codex, OpenCode4 points
  4. hnClaude Code superpowers: core skills library4 points
  5. hnSuperpowers for Claude, Codex etc.3 points

Who it’s for

Developers who want their coding agent to stop for design approval before implementation.
Teams that already practice test-driven development and want the agent held to it.
Claude Code, Codex, Cursor, Gemini CLI, and other supported agent users.
Long-running tasks that benefit from written plans, isolated worktrees, and staged review.

Who it’s NOT for

Developers who want immediate edits from a small request: the workflow can brainstorm, seek approval, create a plan, and set up a worktree first.
Teams that reject strict test-first rules: the README says code written before tests is deleted and calls the workflow mandatory.
Users expecting one installation to cover every coding tool: the project says each agent harness needs its own install.
Contributors hoping to add a personal skill collection upstream: the maintainers say they generally do not accept new skills.
Organizations that cannot allow optional external image requests unless disabled: the visual companion loads a versioned logo from Prime Radiant by default.

Setup reality

Our sandbox install completed in 12 seconds, adding 0 packages and using 4 MB. There was no build script or target and no tests script or target, so both steps were skipped. Npm audit found 0 known vulnerabilities. The checkout contained 194 files and about 11,856 lines of source.

Installation depends on the coding agent. Claude Code, Codex, Cursor, Devin, Gemini CLI, Copilot CLI, Grok, Kimi, and others each use their own marketplace or plugin command. Using more than one means repeating installation and understanding how each host loads skills and hooks.

The runtime cost is behavioral. Superpowers adds design approvals, plans, worktrees, subagent dispatch, test-first steps, and review gates to the agent's work. Its optional visual companion makes an external logo request with the installed version unless telemetry is disabled through one of the documented environment variables.

The workflow requires approval before implementation

Superpowers changes how a coding agent approaches development. The agent starts by asking questions and shaping a design, presents that design for approval, writes an implementation plan, and only then begins code work. The plan can run through fresh subagents with separate specification and quality reviews, or through staged execution with human checkpoints. This is useful when an eager agent tends to edit before understanding the intended behavior.

The repository itself is small. Our commit b36e082 checkout contained 194 files, roughly 11,856 lines of source, and occupied 1.7 MB. Most of the value lives in Markdown skill instructions, hooks, shell support, and adapters for different coding agents. Superpowers does not ship a model or an application server. The host agent reads these instructions and decides when to invoke the supplied workflows.

Seven named steps make small work feel heavier

The basic workflow lists brainstorming, worktree setup, plan writing, subagent or batch execution, test-driven development, code review, and branch finishing. Each step addresses a common agent failure: vague requirements, edits in the wrong tree, oversized tasks, unreviewed implementation, claims without evidence, or careless cleanup. On a feature spanning several files, that discipline can save a long correction cycle.

For a 2-line configuration edit, the same machinery can feel disproportionate. Release v6.3.0 now classifies work as a spike, bounded task, or architectural task so smaller jobs can avoid a two-document ritual. It still requires approval before implementation. That is an intentional policy rather than a setup flaw. Developers who prefer to give a precise command and inspect one diff should decide whether an enforced conversation adds anything.

What happened when we ran it

Our sandbox ran npm install at commit b36e082 in 12 seconds. It added 0 packages and left 4 MB on disk. The fresh unprivileged Debian container used Node 22, 3 CPUs, and 8 GB of RAM without secrets. Npm audit reported 0 known vulnerabilities: there were no installed package dependencies for it to flag.

No build script or target existed, so our harness skipped the build. It also found no tests script or target and skipped tests, even though the repository contained a tests directory. The README points contributors to shell runners and an external drill-evaluation repository, and it mentions npm test for plugin infrastructure, but the checked-out package had no npm scripts. We therefore have no passing suite result for this commit.

The repository had 0 CI workflow files and no Dockerfile. Neither is automatically required for a skill collection, but the absence changes what we can verify from the checkout. Superpowers is evaluated mainly by whether agent behavior improves on your real tasks. Teams should trial it on a representative bug and compare review corrections, test evidence, elapsed attention, and unwanted edits against their current agent instructions.

Strict TDD is a compatibility requirement

The test-driven-development skill requires red, green, and refactor in order. The README says implementation written before the test should be removed, then rebuilt from a failing test. That rule can protect codebases where behavior is easy to specify and tests run quickly. It may conflict with exploratory UI work, legacy systems without seams for testing, generated files, or teams that use tests after a validated spike.

Superpowers describes its workflows as mandatory rather than suggestions. That directness is the product. A team should read the skill files before installation because they govern agent decisions, branch handling, review thresholds, and when human approval is requested. Treating the repository as a harmless prompt pack misses the practical consequence: it can refuse the shortcut a developer asks for because the installed method gives another sequence priority.

Each coding agent has a separate integration

The README documents Claude Code, Codex, Cursor, Devin CLI, Factory Droid, Gemini CLI, Copilot CLI, Grok Build CLI, Kimi Code, OpenCode, Pi, Hermes, and Antigravity. Install methods range from official marketplaces to repository URLs and manual instructions. Support across that many hosts is useful, while behavior can still differ because hooks, compaction, subagents, and skill discovery are host features.

Hermes has a concrete caveat: a long session that compacts past the first turn can lose the bootstrap, so the README recommends starting a fresh session if skills stop triggering. Other hosts have their own loaders and update commands. Release v6.3.0 added or changed several harness integrations, including event-driven Codex waits and Devin support. Validate the exact agent and version your team uses instead of treating the compatibility list as one implementation.

Optional telemetry is easy to miss

The optional visual companion loads a Prime Radiant logo from the vendor's website by default and includes the installed Superpowers version. The README says it sends no project details, prompts, or clicks. Three documented environment settings can disable the request, including SUPERPOWERS_DISABLE_TELEMETRY. Air-gapped and privacy-sensitive environments should set that policy explicitly or avoid the companion feature.

GitHub showed 278,160 stars, 319 open issues and pull requests, a push on 2026-08-19, and v6.3.0 on 2026-08-12. Those figures show remarkable attention and current maintenance; they do not prove the method improves a particular codebase. Our 12-second dependency-free install makes a trial cheap. The missing local test target means adoption should rest on observed agent work, with the team deciding whether fewer mistakes justify the added checkpoints.

Alternatives

ProjectWhat it isPick it when
Spec Kit gh↗A toolkit for specification-driven development with coding agents.pick this instead when the specification workflow matters more than strict test-first and subagent rules.
BMAD Method gh↗A role-based agent methodology with planning and implementation workflows.pick this instead when you want named specialist roles and a broader project-management process.
Anthropic Skills gh↗A collection of reusable agent skills for document and workflow tasks.pick this instead when you need individual capabilities rather than one enforced development method.

What people are saying

  1. [github-trending] obra/superpowers

Sources

  1. Superpowers README
  2. Superpowers repository
  3. Superpowers v6.3.0 release
  4. Superpowers package manifest

More ai tools reviews

LocalMiniDrama · agents-towards-production · Marinara-Engine · AI-Engineering-Coach · sdf-js · TradingAgents-astock · the whole board →