maestro

SUSPICIOUS. The skill's orchestration purpose matches its behavior, but its footprint is broad: Bash execution, direct in-context delegation to many other local skills, artifact-driven step growth, and auto-confirmed multi-step actions. The main risks are transitive trust and autonomous consequential actions, not confirmed malware or explicit exfiltration.