🦸 AI 编程超能力 · 中文增强版 — superpowers(250k+ ⭐)完整汉化 + 4 个中国原创 skills,让 Claude Code / Copilot CLI / Hermes Agent / Cursor / Windsurf / Kiro / Gemini CLI / Qoder 等 26 款 AI 编程工具真正会干活
This report summarizes scanner evidence for jnMetaCode/superpowers-zh, a JavaScript project with 8,292 GitHub stars. SynthScan examined 31,217 lines of code across 208 source files, recording 96 pattern matches distributed across 12 syntactic categories. The legacy adjusted pattern signal is 5.5 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 76 finding(s).
Are imports declared and package/API names verified? 4 finding(s).
Are wrappers, guards, and repeated structures necessary? 34 finding(s).
Which changes need focused human review? 96 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 96 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | scripts/audit.sh | 52 | #============================================================================== | COMMENT |
| MEDIUM | scripts/audit.sh | 54 | #============================================================================== | COMMENT |
| MEDIUM | scripts/audit.sh | 112 | #============================================================================== | COMMENT |
| MEDIUM | scripts/audit.sh | 115 | #============================================================================== | COMMENT |
| MEDIUM | scripts/audit.sh | 169 | #============================================================================== | COMMENT |
| MEDIUM | scripts/audit.sh | 171 | #============================================================================== | COMMENT |
| MEDIUM | scripts/audit.sh | 347 | #============================================================================== | COMMENT |
| MEDIUM | scripts/audit.sh | 349 | #============================================================================== | COMMENT |
| MEDIUM | scripts/audit.sh | 399 | #============================================================================== | COMMENT |
| MEDIUM | scripts/audit.sh | 401 | #============================================================================== | COMMENT |
| MEDIUM | scripts/audit.sh | 505 | #============================================================================== | COMMENT |
| MEDIUM | scripts/audit.sh | 507 | #============================================================================== | COMMENT |
| MEDIUM | scripts/audit.sh | 567 | #============================================================================== | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/claude-code/test-document-review-system.sh | 31 | # Create a spec document WITH INTENTIONAL ERRORS for the reviewer to catch | COMMENT |
| MEDIUM | tests/claude-code/test-helpers.sh | 128 | # Create a temporary test project directory | COMMENT |
| MEDIUM | tests/claude-code/test-helpers.sh | 144 | # Create a simple plan file for testing | COMMENT |
| MEDIUM | …e-code/test-subagent-driven-development-integration.sh | 47 | # Create a simple implementation plan | COMMENT |
| MEDIUM | tests/explicit-skill-requests/run-test.sh | 44 | # Create a minimal project directory for the test | COMMENT |
| MEDIUM | tests/explicit-skill-requests/run-test.sh | 48 | # Create a dummy plan file for mid-conversation tests | COMMENT |
| MEDIUM | tests/explicit-skill-requests/run-haiku-test.sh | 33 | # Create a dummy plan file | COMMENT |
| MEDIUM | tests/explicit-skill-requests/run-multiturn-test.sh | 29 | # Create a dummy plan file | COMMENT |
| MEDIUM | …ts/explicit-skill-requests/run-claude-describes-sdd.sh | 23 | # Create a plan | COMMENT |
| MEDIUM | tests/opencode/setup.sh | 54 | # Create a project directory for project-level skill tests | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | index.js | 1 | // Root entrypoint for OpenCode v2 directory-form plugin registration. | COMMENT |
| LOW | bin/superpowers-zh.js | 41 | const SKILLS_SRC = resolve(__dirname, '..', 'skills'); | COMMENT |
| LOW | bin/superpowers-zh.js | 61 | // Codex 各层级扫的都是 .agents/skills,**从不扫 .codex/skills**。官方文档 | COMMENT |
| LOW | bin/superpowers-zh.js | 81 | // custom 默认被 gitignore,无需任何配置。容器内挂到 /mnt/skills/。 | COMMENT |
| LOW | bin/superpowers-zh.js | 101 | 已经由 Trae 这一条覆盖,请直接用: | COMMENT |
| LOW | bin/superpowers-zh.js | 121 | // 项目级:.windsurf/skills/<skill-name>/ | COMMENT |
| LOW | bin/superpowers-zh.js | 141 | { name: 'OpenCode', dir: '.opencode/skills', detect: '.opencode', global: { dir: '. | COMMENT |
| LOW | bin/superpowers-zh.js | 161 | // 记忆文件 ~/.codebuddy/CODEBUDDY.md 与 项目根 CODEBUDDY.md(两处等价) | COMMENT |
| LOW | bin/superpowers-zh.js | 181 | // docs 里写明了别重复装,否则 Crush 会加载两份。 | COMMENT |
| LOW | bin/superpowers-zh.js | 1301 | return realpathSync(p) === realpathSync(home); | COMMENT |
| LOW | .opencode/plugins/superpowers.js | 141 | }; | COMMENT |
| LOW | tests/claude-code/test-worktree-native-preference.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/brainstorm-server/windows-lifecycle.test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/make-og-image.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/verify-release.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/verify-release.sh | 281 | if curl -sS -o /dev/null --max-time 5 https://github.com 2>/dev/null; then | COMMENT |
| LOW | scripts/audit.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/audit.sh | 261 | # 本插件在 .claude-plugin/plugin.json 里叫 superpowers-zh,Claude Code 按 | COMMENT |
| LOW | scripts/audit.sh | 361 | # 4b. Skill 间引用完整性 | COMMENT |
| LOW | scripts/audit.sh | 401 | #============================================================================== | COMMENT |
| LOW | scripts/audit.sh | 501 | if [ "$tools_tested" = "$EXPECTED_TOOLS" ]; then ok; else | COMMENT |
| LOW | …ystematic-debugging/condition-based-waiting-example.ts | 141 | // --------------- | COMMENT |
| LOW | skills/chinese-code-review/SKILL.md | 101 | COMMENT | |
| LOW | skills/brainstorming/scripts/start-server.sh | 1 | #!/usr/bin/env bash | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/claude-code/test-helpers.sh | 31 | # Check if output contains a pattern | COMMENT |
| LOW | tests/claude-code/test-helpers.sh | 50 | # Check if output does NOT contain a pattern | COMMENT |
| LOW | tests/claude-code/test-helpers.sh | 69 | # Check if output matches a count | COMMENT |
| LOW | tests/claude-code/test-helpers.sh | 95 | # Check if pattern A appears before pattern B | COMMENT |
| LOW | tests/claude-code/run-skill-tests.sh | 18 | # Check if Claude Code is available | COMMENT |
| LOW | tests/explicit-skill-requests/run-test.sh | 81 | # Check if skill was triggered (look for Skill tool invocation) | COMMENT |
| LOW | tests/explicit-skill-requests/run-test.sh | 97 | # Check if Claude took action BEFORE invoking the skill (the failure mode) | COMMENT |
| LOW | tests/explicit-skill-requests/run-test.sh | 105 | # Check if any non-Skill, non-system tools were invoked before the first Skill invocation | COMMENT |
| LOW | tests/explicit-skill-requests/run-multiturn-test.sh | 89 | # Check if skill was triggered in Turn 3 | COMMENT |
| LOW | tests/skill-triggering/run-test.sh | 58 | # Check if skill was triggered (look for Skill tool invocation) | COMMENT |
| LOW | tests/opencode/test-priority.sh | 89 | # Check if opencode is available for integration tests | COMMENT |
| LOW | tests/opencode/test-tools.sh | 17 | # Check if opencode is available | COMMENT |
| LOW | tests/opencode/test-tools.sh | 48 | # Check if personal test skill was found | COMMENT |
| LOW | scripts/bump-version.sh | 88 | # Check if all versions match | COMMENT |
| LOW | scripts/bump-version.sh | 149 | # Check if this file is in the declared list | COMMENT |
| LOW | skills/systematic-debugging/find-polluter.sh | 53 | # Check if pollution appeared | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bin/superpowers-zh.js | 258 | function generateTraeBootstrapRule(projectDir) { | CODE |
| LOW | bin/superpowers-zh.js | 303 | function generateClineBootstrapRule(projectDir) { | CODE |
| LOW | bin/superpowers-zh.js | 345 | function generateKiroSteeringIndex(projectDir) { | CODE |
| LOW | bin/superpowers-zh.js | 409 | function generateKiloCodeBootstrapRule(projectDir) { | CODE |
| LOW | bin/superpowers-zh.js | 496 | function generateAntigravityBootstrap(baseDir, isGlobal) { | CODE |
| LOW | bin/superpowers-zh.js | 877 | function generateClaudeCodeBootstrap(baseDir, isGlobal) { | CODE |
| LOW | bin/superpowers-zh.js | 930 | function generateReasonixBootstrap(projectDir) { | CODE |
| LOW | bin/superpowers-zh.js | 980 | function generateDeepSeekHarnessBootstrap(baseDir, isGlobal) { | CODE |
| LOW | bin/superpowers-zh.js | 1025 | function generateCodeBuddyBootstrap(baseDir, isGlobal) { | CODE |
| LOW | tests/brainstorm-server/branding.test.js | 77 | function createPackagedServerFixture(version) { | CODE |
| LOW | tests/brainstorm-server/branding.test.js | 157 | function assertBrandedFallbackText(html, version = PACKAGE_VERSION) { | CODE |
| LOW | tests/brainstorm-server/branding.test.js | 173 | function assertLogoKeepsTransparentBackground(html) { | CODE |
| LOW | tests/brainstorm-server/branding.test.js | 208 | function assertFramedLogoSupportsDarkTheme(html) { | CODE |
| LOW | tests/brainstorm-server/branding.test.js | 215 | function assertFramedScreenUsesBrandHeader(html) { | CODE |
| LOW | tests/brainstorm-server/branding.test.js | 227 | function assertHeaderAvoidsNarrowOverlap(html) { | CODE |
| LOW | tests/brainstorm-server/server.test.js | 93 | function assertStartedOnExpectedPort(out) { | CODE |
| LOW | tests/brainstorm-server/auth.test.js | 116 | function assertStartedOnExpectedPort(out) { | CODE |
| LOW | .pi/extensions/superpowers.ts | 115 | function firstNonCompactionSummaryIndex(messages: unknown[]): number { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | skills/brainstorming/scripts/start-server.sh | 153 | # Resolve the harness PID (grandparent of this script). | COMMENT |
| MEDIUM⚡ | skills/brainstorming/scripts/start-server.sh | 154 | # $PPID is the ephemeral shell the harness spawned to run us — it dies | COMMENT |
| MEDIUM⚡ | skills/brainstorming/scripts/start-server.sh | 155 | # when this script exits. The harness itself is $PPID's parent. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/subagent-driven-dev/go-fractals/scaffold.sh | 3 | # Usage: ./scaffold.sh /path/to/target/directory | COMMENT |
| MEDIUM | tests/subagent-driven-dev/svelte-todo/scaffold.sh | 3 | # Usage: ./scaffold.sh /path/to/target/directory | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/claude-code/analyze-token-usage.py | 67 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/claude-code/test-document-review-system.sh | 63 | git config user.email "test@test.com" | CODE |
| LOW | tests/claude-code/test-requesting-code-review.sh | 50 | git config user.email "test@test.com" | CODE |
| LOW | …e-code/test-subagent-driven-development-integration.sh | 109 | git config user.email "test@test.com" | CODE |
| LOW | skills/brainstorming/visual-companion.md | 246 | <div class="placeholder">占位区域</div> | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/claude-code/analyze-token-usage.py | 67 | except Exception: | CODE |
| MEDIUM | tests/claude-code/analyze-token-usage.py | 91 | print(f"Error: Session file not found: {main_session_file}") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/brainstorm-server/windows-lifecycle.test.sh | 15 | # Usage: | COMMENT |
| LOW | scripts/bump-version.sh | 6 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/claude-code/analyze-token-usage.py | 12 | CODE |