maestro-grill
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied topics and plans through the
$ARGUMENTSvariable to drive its questioning logic and codebase exploration. - Ingestion points:
$ARGUMENTSinSKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are defined for the input interpolation.
- Capability inventory: The skill utilizes
Bash,Read,Write,Edit,Glob, andGreptools to explore the filesystem and generate documentation. - Sanitization: No explicit sanitization or validation of the input is specified within the instructions.
- [COMMAND_EXECUTION]: The skill uses the
Bashtool and references themaestroCLI for codebase searching, specification loading, and role delegation. These operations are consistent with the skill's stated purpose of codebase analysis. - [DATA_EXPOSURE]: The skill reads from the local codebase and accesses configuration files located in
~/.maestro/. This data is used internally to ground the Socratic dialogue in the reality of the existing code, and no evidence of external transmission was found.
Audit Metadata