maestro-next

Warn

Audited by Socket on Jul 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is internally aligned with an orchestration purpose and shows no exfiltration or remote installer behavior, but it creates a meaningful transitive trust risk by auto-selecting and invoking other local/global skills, especially with `-y`, and it relies on an undocumented/unverified `maestro ralph skills` CLI surface.

Confidence: 82%Severity: 56%
Audit Metadata
Analyzed At
Jul 17, 2026, 12:18 PM
Package URL
pkg:socket/skills-sh/catlog22%2Fmaestro-flow%2Fmaestro-next%2F@e9974b61a0104c69a47ebca7e63d1d6fac6341c455f99744fbbd1c48cc190081
Security Audit — socket — maestro-next