Live survey304 models · 14 providers · 22,792 auditsAudited grill-with-docs · SAFE →What changedHow we verifyllms.txt

Agent skill · Audited from source

Capture

skill · sharpdeveye/maestroMIT licenceAudited 19 Oct 2026 · source 4e163a7a8095

★ 591pushed 173 days agoversion 2.0.0
✓SAFEGrade B · 89/100 · 19 Oct 2026 · 4e163a7
591repo stars · whole sharpdeveye/maestro

Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 4e163a7a8095 and found no filesystem, network or shell access and no hard-coded secrets. What it does: Capture a session summary — what was done, what decisions were made, and what to do next.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Capture (sharpdeveye/maestro)”. Retrieved 19 Oct 2026. https://modelsatlas.com/skills/sharpdeveye/capture

3 skills are called “Capture”. You are viewing sharpdeveye/maestro.

Trust audit

Audit 0.4.1 · source read 19 Oct 2026

Trust score89/100✓SAFE B
0 critical0 high0 medium0 low0 info

SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 16,667 of 17,602 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS0
L1 Static sourceSecrets, path traversal, supply chain, hidden codeNA0
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS0
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (0)

No findings at any severity. We re-audit when the source changes.

Audit 0.4.1 · source sha 4e163a7a8095 · 19 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publishersharpdeveye GitHub userOwner of the repository this skill is read from
  • Source foldersharpdeveye/maestro/source/skills/captureThe exact folder we audited
  • LicenceMITAs the repository states it
  • Commit pinned for this verdict4e163a7a8095A new audit runs when the source changes
  • Repository statusNot archivedLast push 173 days ago
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Capture a session summary — what was done, what decisions were made, and what to do next.

---
name: capture
description: "Capture a session summary — what was done, what decisions were made, and what to do next."
argument-hint: "[session topic]"
category: utility
version: 2.0.0
user-invocable: true
---

## MANDATORY PREPARATION

Invoke /agent-workflow — it contains workflow principles, anti-patterns, and the **Context Gathering Protocol**. Follow the protocol before proceeding — if no workflow context exists yet, you MUST run /teach-maestro first.

---

Capture the current session's work into a persistent summary. This creates a record that survives session boundaries — future commands can reference what happened here.

### What to Capture

Read the conversation history and identify:

1. **Commands run** — which Maestro commands were invoked and in what order
2. **Decisions made** — architectural choices, trade-offs accepted, patterns adopted
3. **Files changed** — what was created, modified, or deleted
4. **Issues found** — bugs, gaps, or risks identified
5. **Next steps** — what should happen next (be specific)

### Output Format

Generate a session summary file at `.maestro/sessions/{date}_{topic}.md`:

```markdown
# Session: {topic}
Date: {YYYY-MM-DD}

## Commands Run
- /diagnose → Score: 18/25
- /fortify → Added retry logic to API handlers
- /evaluate → Verified with 3 test scenarios

## Decisions
- Chose retry-with-backoff over circuit breaker (simpler, sufficient for current load)
- Kept synchronous error handling (async not justified yet)

## Files Changed
- `src/api/handler.ts` — added retry wrapper
- `src/middleware/auth.ts` — added input validation
- `tests/api.test.ts` — new test file

## Open Issues
- Rate limiting not yet implemented (deferred to next session)

## Next Steps
1. Run `/guard` to add rate limiting
2. Run `/evaluate` with adversarial test cases
```

Also append a decision entry to `.maestro/decisions.jsonl` recording this capture.

### Session Capture Checklist

- [ ] All commands from this session listed
- [ ] Key decisions documented with rationale
- [ ] Files changed listed with brief descriptions
- [ ] Open issues captured (nothing lost)
- [ ] Next steps are specific and actionable
- [ ] Summary saved to `.maestro/sessions/`

### Recommended Next Step

After capturing, your next session should start with `/recap` to restore context, then proceed with the next steps listed above.

**NEVER**:

- Store raw prompts or full LLM outputs in the session file
- Overwrite an existing session file — create a new one
- Skip the "Next Steps" section — this is what makes capture valuable
- Capture without reading the conversation history first
- Auto-capture without the user invoking this command

Excerpt, first 2,672 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 4e163a7

Download folder ↗
git clone https://github.com/sharpdeveye/maestro
git -C maestro checkout 4e163a7a8095

The author documents no install command, so this uses the repository directly. Our verdict covers commit 4e163a7a8095 only.

Works in

The author has not said which agents this skill supports, and we have not tested it in any.

Audit history

Every audit, every source change

  1. ✓SAFE B 89 / 100

    first audit · source 4e163a7a8095

Similar skills

Questions about Capture

What does the Capture skill do?
Workflow fluency for AI coding agents. 1 core skill · 25 commands · 7 domain references · memory layer · audit trail — works across Cursor, Claude Code, Gemini CLI, Copilot, and 6 more.
Is Capture safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Capture access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (4e163a7a8095), read on 2026-10-19. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.