maestro-grill

SUSPICIOUS: the skill’s stated purpose broadly matches code exploration and report generation, but it is overpowered for that role and offloads critical behavior to external CLIs (maestro and delegated Claude analysis). Main concern is supply-chain and trust expansion, not confirmed malicious intent; data flow appears local/official rather than obvious credential exfiltration.