skills/catlog22/maestro-flow/maestro-tools-execute/Socket

maestro-tools-execute

Warn

Audited by Socket on Jul 3, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s purpose matches its capabilities, but it is a high-impact executor for other tool specs. The main risk is transitive trust and indirect prompt injection from loaded Maestro content that can drive Bash and file modifications after a single approval.

Confidence: 82%Severity: 68%

Audit Metadata

Analyzed At

Jul 3, 2026, 08:46 AM

Package URL

pkg:socket/skills-sh/catlog22%2FMaestro-Flow%2Fmaestro-tools-execute%2F@bad070463ede061787ba2c62736473a6c26d500d92764263cd7ea95753ba59bb