Skip to main content

dev-maestro

Facilitates task management and status tracking for MASTER_PLAN.md using the Dev Maestro dashboard.

Install this skill

or
76/100

Security score

The dev-maestro skill was audited on Feb 9, 2026 and we found 12 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 43

Curl to non-GitHub URL

SourceSKILL.md
43curl -s http://localhost:PORT/api/status 2>/dev/null && echo "RUNNING" || echo "NOT RUNNING"
medium line 67

Curl to non-GitHub URL

SourceSKILL.md
67sleep 3 && curl -s http://localhost:PORT/api/status
medium line 13

Access to hidden dotfiles in home directory

SourceSKILL.md
13| Install | `~/.dev-maestro` |
low line 61

Access to hidden dotfiles in home directory

SourceSKILL.md
61cd ~/.dev-maestro && PORT=PORT npm start &
low line 94

Access to hidden dotfiles in home directory

SourceSKILL.md
94lsof -ti:PORT | xargs kill -9 && cd ~/.dev-maestro && PORT=PORT npm start &
low line 103

Access to hidden dotfiles in home directory

SourceSKILL.md
103cd ~/.dev-maestro && ./install.sh --reconfigure
low line 122

Access to hidden dotfiles in home directory

SourceSKILL.md
122cd ~/.dev-maestro && nohup npm start > /tmp/dev-maestro.log 2>&1 &
low line 12

External URL reference

SourceSKILL.md
12| URL | http://localhost:PORT |
low line 43

External URL reference

SourceSKILL.md
43curl -s http://localhost:PORT/api/status 2>/dev/null && echo "RUNNING" || echo "NOT RUNNING"
low line 67

External URL reference

SourceSKILL.md
67sleep 3 && curl -s http://localhost:PORT/api/status
low line 72

External URL reference

SourceSKILL.md
72> "Dev Maestro is running at http://localhost:PORT"
low line 158

External URL reference

SourceSKILL.md
158// Open DevTools (F12) at http://localhost:6010/kanban/
Scanned on Feb 9, 2026
View Security Dashboard
Installation guide →