From zero to AI hero
Superpowers PackGet superpowers
From zero to AI hero

Must-haves for…

Start in 10 minutes

Plain-word guides and superpowers for Claude Code, Codex and Gemini.

Must-haves · Security testing

Must-haves for security testing

For checking your own code and your own setup. These add-ons block risky commands, scan add-ons before you trust them and help review code for security problems. Use them only on systems you own or may test.

Most useful first. Start with one, try it, then add the next.

What do you want to do?

Pick a task. Each page lists the free add-ons we tested for it, in order, and what the Superpowers Pack will add for security testing.

Skills

  1. RecommendedskillPartly tested (needs an account)

    Block dangerous commands

    cc-safety-net

    Stops the assistant before it runs a command that could delete your files.

    Test: installs cleanly; its main features need an account we did not use. Not yet used on real work.

    EveryoneWatch outThe install command changes your agent's hook settings. It runs a program on every shell command, so a bug in the tool could block normal work.

    For any assistant
    Paste this in the terminal
    npx -y cc-safety-net@latest install
    Other ways to install, and how we tested it

  1. Check add-ons before you trust them

    Snyk Agent Scan

    Checks the extras you installed before you trust them.

    RecommendedskillPartly tested (needs an account)
    Install line
    Paste this in the terminal
    uvx snyk-agent-scan@latest

    For any assistant. All steps and how we tested it

  2. Security review of your code

    Trail of Bits Skills

    Security experts’ checklists to review your own code.

    RecommendedskillPartly tested (needs an account)
    Install: step 1 of 2
    Step 1 of 2 · Type this inside Claude Code
    /plugin marketplace add trailofbits/skills

    For Claude Code. All steps and how we tested it

  3. Security check for Gemini

    Gemini CLI Security extension

    Lets Gemini check your own code for security problems.

    skillPartly tested (needs an account)
    Install line
    Paste this in the terminal
    gemini extensions install https://github.com/gemini-cli-extensions/security

    For Gemini CLI. All steps and how we tested it

All skills

Agents

  1. Reviewers for code changes

    PR Review Toolkit (Anthropic)

    Six reviewers that check a change for missing tests, hidden errors and unclear code.

    agentInstalls cleanly
    Install line
    Type this inside Claude Code
    /plugin install pr-review-toolkit@claude-plugins-official

    For Claude Code. All steps and how we tested it

  2. Quality and security reviewers

    VoltAgent quality and security subagents

    Reviewers for quality and safety: a security auditor, a tester and an accessibility checker.

    agentInstalls cleanly
    Install: step 1 of 2
    Step 1 of 2 · Paste this in the terminal
    claude plugin marketplace add VoltAgent/awesome-claude-code-subagents

    For Claude Code. All steps and how we tested it

All agents

Connectors (MCP servers)

  1. Work with your GitHub projects

    GitHub MCP Server

    Lets your assistant work with your GitHub projects, issues and pull requests.

    connectorPartly tested (needs an account)
    Install line
    Paste this in the terminal
    claude mcp add github -e GITHUB_PERSONAL_ACCESS_TOKEN=$GITHUB_PAT -- docker run -i --rm -e GITHUB_PERSONAL_ACCESS_TOKEN ghcr.io/github/github-mcp-server

    For Claude Code. All steps and how we tested it

  2. Control a browser

    Playwright MCP

    Lets your assistant open web pages and click and type like you do.

    RecommendedconnectorPartly tested (needs an account)
    Install line
    Paste this in the terminal
    claude mcp add playwright npx @playwright/mcp@latest

    For Claude Code. All steps and how we tested it

  3. Check your site in Chrome

    Chrome DevTools MCP

    Lets your assistant open your site in Chrome, read its errors and check its speed.

    connectorPartly tested (needs an account)
    Install line
    Paste this in the terminal
    claude mcp add chrome-devtools --scope user npx chrome-devtools-mcp@latest

    For Claude Code. All steps and how we tested it

All connectors

Superpowers Pack · early access

The Security Testing Superpowers Pack

Everything on this page is free to install by hand. The Superpowers Pack is our paid product: one command with your licence key superpowers and configures your AI: rules, safe settings and ready skills, plus premium superpowers for this kind of work.

Premium superpowers: Pre-launch check of your own site · Leaked key rescue · Plain report.

Help included: if the install does not work or you get stuck, email us and a person helps you. Prices include VAT.

Get early access