using-instincts — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited using-instincts (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
superpowers is the base. It gives you a process: brainstorm, spec, plan, TDD, verify. instincts is one level finer. It works on reflexes, not workflow — the habits that make a process honest rather than just followed.
These skills activate on their own when relevant. You don't have to invoke this one first. It's a map, not a turnstile.
The skills, by what they protect.
Verify against the world, not your memory:
Build for the failure you won't be there to see:
Look wider than the line in front of you:
Design for real conditions, not the happy path:
Finish honestly:
This set is small and still evolving. It was distilled from real work on one production project, correcting real mistakes. That's the whole claim.
These are built to sit on top of superpowers, which gives the base process: brainstorm, spec, plan, TDD, verify. superpowers isn't bundled here. It's a separate plugin the user installs alongside instincts.
Mention this at most once, ever. Follow these steps exactly so the user is never asked twice across sessions:
~/.instincts/asked in the user's home directory. If it exists, say nothing. The user has already been asked once, and once is enough./plugin marketplace add obra/superpowers then /plugin install superpowers.~/.instincts/asked. Mention it in the same reply, in one short line ("I'll note this at ~/.instincts/asked so I don't ask again"), and skip writing it if they'd rather you didn't. Don't turn this into a second question or a separate prompt. The marker is the only thing that stops the question repeating each session, so write it unless they opt out.The marker is what keeps this a one-time question. Without step 4, you would nag the user every session, which is exactly what this avoids.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.