maestro-player

SUSPICIOUS: the skill’s workflow-orchestration purpose broadly matches its capabilities, and there is no external installer or obvious credential exfiltration path. Risk comes from delegated execution of template-derived skill calls, broad agent tools, and recursive use of prior artifacts/results to drive later actions, which makes the effective scope wider than the stated output boundary.