maestro-skills

Universal AI Agent Development Skills Hub & Cordis Plugin for Govard, Magento 2, Laravel. Works with Claude Code, Codex CLI, OpenCode, GitHub Copilot, DeepSeek Harness.

PluginDeveloperAI ModelsTerminalGitHub integrationTerminal / Shell

Verification

L2 · Structured

Security

Medium

Health

Active

Trust

Silver

What it doesAI

Universal AI Agent Development Skills Hub & Cordis Plugin for Govard, Magento 2, Laravel, compatible with multiple AI coding tools.

Works with Claude Code, Codex CLI, OpenCode
Compatible with GitHub Copilot, DeepSeek Harness
For Govard, Magento 2, Laravel frameworks

AI-generated from the repo README — for reference only.

Installation

dsh plugin --profile web add github:ddtcorex/maestro-skills

Install method: GitHub · not yet tested in container (L3+)

Compatibility

DSH Version	Status
not stated	Declared — not tested

Requirements

• Node.js: not stated
• DSH: declared "not stated"
• External credentials: none detected

Security Report

Automated static scan, not manual review.

DSH.SO VETMEDIUM9d4085

Security reviewAutomated review · daily

MEDIUM

Vet verdict is suspicious: findings need human review (exfiltration endpoints, file deletion, etc.).

0 critical·3 high·6 medium·14 score

Version binding

plugin version2.0.0dsh manifest

scanned commit9d408592867b2026-08-22

latest commit9d408592867b

vet verdictsuspicious · gitscore 14

Vet is an AST static scan (npm artifact or git source).

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk details

Risk	Rule	Location	Description
high	R14	install.sh:4	脚本下载即执行：curl\|sh 远程代码执行（脚本随包分发，安装/运行期任意代码执行面）
high	R2	server.cjs:2	require('http') 危险内置模块（执行/网络能力触达）
high	R2	server.cjs:537	require('child_process') 危险内置模块（执行/网络能力触达）
medium	R2	server.cjs:1	require('crypto') 标准内置模块
medium	R2	server.cjs:3	require('fs') 标准内置模块

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Activity

Last commit 2026-08-22 · activity: Active

• Repo created: 2026-08-22

• Stars: ★ 2 · Forks: 2

• Health: Active — committed within last 30 days

Source

GitHub: github.com/ddtcorex/maestro-skills

Plugin notes

What is the maestro-skills DeepSeek Harness plugin?

maestro-skills is a DeepSeek Harness plugin maintained by @ddtcorex. It is cataloged on dsh.so as a Developer plugin for GitHub integration tasks, with a public GitHub source, declared install command, and automated static security scan.

How do I install maestro-skills?

Run dsh plugin --profile web add github:ddtcorex/maestro-skills in a DeepSeek Harness (dsh) environment. The command is parsed from the plugin manifest, but it has not yet been tested in an isolated container at the L3+ level.

Is the security scan on this page a manual audit?

No. The scan is an automated heuristic review of the repository source and can produce false positives. It is not a manual security audit and never an endorsement; review the repository and installed permissions before using the plugin.

"DeepSeek Harness (dsh) is an open-source agent harness developed by DeepSeek AI. It uses an architecture where everything is a plugin, and is powered by Cordis."
— DeepSeek Harness README

Sources: GitHub repository · DeepSeek Harness README · security scan data · Maintained by dsh.so · Last updated 2026-08-22