maestro-issue

SUSPICIOUS: the visible skill is a thin dispatcher for issue management, but it delegates all real behavior to unseen local workflow files and grants a broader-than-necessary action surface (`Bash`, `WebFetch`, agent spawning). There is no direct evidence of malware, credential theft, or malicious exfiltration in this file, but the hidden workflow dependency and indirect instruction-following make the skill medium risk.