ai-maestro-plugins

agent
Security Audit
Fail
Health Warn
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 5 GitHub stars
Code Fail
  • rm -rf — Recursive force deletion command in build-plugin.sh
  • rm -rf — Recursive force deletion command in plugins/ai-maestro/scripts/agent-core.sh
  • rm -rf — Recursive force deletion command in plugins/ai-maestro/scripts/agent-plugin.sh
  • rm -rf — Recursive force deletion command in plugins/ai-maestro/scripts/agent-skill.sh
Permissions Pass
  • Permissions — No dangerous permissions requested
Purpose
This is a plugin builder designed to assemble custom skill sets for AI agents. It allows developers to mix, match, and package various capabilities from local and remote sources into a single tailored plugin.

Security Assessment
Overall risk: Medium. The tool is heavily shell-based and actively executes local system commands to build its packages. The automated scan flagged multiple instances of `rm -rf` (recursive force deletion) across its core build and execution scripts (`build-plugin.sh`, `agent-core.sh`, etc.). While this is common in build scripts to clean up directories, a malicious or flawed input could potentially lead to unintended data deletion. Additionally, the manifest pulls external code directly from remote GitHub repositories, which inherently carries supply chain risks if those external sources are compromised or malicious. No hardcoded secrets or dangerous explicit permission requests were found.

Quality Assessment
The project is very new and currently has extremely low visibility with only 5 GitHub stars, indicating minimal peer review from the open-source community. However, it is actively maintained (last updated today) and is properly licensed under the permissive and standard MIT license, which is a positive indicator for open-source use.

Verdict
Use with caution. While the active maintenance and MIT license are positives, the low community trust and the presence of aggressive recursive deletion commands in shell scripts mean you should carefully review the code before executing it on your system.
SUMMARY

Build custom skill sets for your AI agents. Pick skills from GitHub, mix your own, assemble a tailored Claude Code plugin. Like uploading Kung Fu into Neo — but for your AI.

README.md

AI Maestro Plugin Builder

Build the exact set of skills your AI agent needs.

Remember when Neo sat in that chair and Tank, the operator, uploaded Kung Fu straight into his brain? Ten seconds later: "I know Kung Fu."

That's what this does for your Claude Code agents.

You pick the skills. You pick the scripts. You build a custom plugin. You install it. Your agent wakes up knowing everything you gave it.

What's a Skill?

A skill is a capability you load into your agent. Out of the box, AI Maestro comes with:

Skill What your agent can do Source
Agent Messaging Send and receive messages to other agents agentmessaging/claude-plugin
Agent Identity Passwordless OAuth 2.0 auth using Ed25519 keys agentmessaging/agent-identity
Agent Management Create, rename, hibernate, wake up other agents Local (src/)
Memory Search Search through past conversations and remember context Local (src/)
Code Graph Understand how your codebase is connected Local (src/)
Docs Search Search auto-generated documentation Local (src/)
Planning Break down complex tasks and track progress Local (src/)

The Source column tells you where each skill lives. Local means it's in this repo's src/ folder. Linked skills are pulled from external repos during build.

But here's the thing — you're not stuck with this list.

The Idea

This repo is not a plugin you install as-is. It's a plugin builder.

Fork it. Edit one file. Pick the skills you want from anywhere — your own, your team's, some random genius on GitHub. The builder assembles them into one plugin, tailored to your agent.

Your agent. Your skills. Your call.

How It Works

1. Fork this repo
2. Edit plugin.manifest.json    ← pick your skills
3. Push (or run ./build-plugin.sh)
4. Install the plugin
5. Your agent knows Kung Fu

The manifest is your recipe. Want to add a code-review skill someone published on GitHub? Add three lines. Don't need memory search? Delete one line. Want to pull in your company's private deploy scripts? Add three lines.

CI builds automatically on push. You never run a build command if you don't want to.

Quick Start

# 1. Fork on GitHub, then:
git clone https://github.com/YOUR-USERNAME/ai-maestro-plugins.git
cd ai-maestro-plugins

# 2. (Optional) Edit plugin.manifest.json to customize

# 3. Build
./build-plugin.sh --clean

# 4. Install into Claude Code
claude plugin install ./plugins/ai-maestro

That's it. Your agent now has every skill in the manifest.

Want to Add a Skill from GitHub?

Say someone published an amazing code-review skill. Open plugin.manifest.json and add:

{
  "name": "code-review",
  "type": "git",
  "repo": "https://github.com/alice/claude-skills.git",
  "ref": "main",
  "map": { "skills/code-review": "skills/code-review" }
}

Build. Install. Now your agent reviews code.

Want to Remove a Skill?

Delete the folder from src/skills/ and rebuild. Your plugin only includes what you keep.

Want to Create Your Own Skill?

Create a folder in src/skills/ with a SKILL.md file that tells Claude what to do. Push. CI builds. Done.

This is how every skill works — it's just a markdown file with instructions. No SDK. No framework. Just words that tell your agent what it's capable of.

The Big Picture

Every AI agent is different because every project is different. A backend agent needs deploy scripts and database tools. A frontend agent needs design systems and accessibility checkers. A research agent needs web search and document analysis.

One-size-fits-all plugins don't work.

This builder lets you assemble exactly the right set of capabilities for each agent you run. Mix skills from open source repos, private team repos, and your own src/ folder — all into one plugin.

Same builder. Different agents. Different superpowers.

Requirements

Learn More

  • DEVELOPERS.md — Manifest reference, CI/CD setup, CLI architecture, advanced customization
  • CHANGELOG.md — Release history

License

MIT

Reviews (0)

No results found