maestro-overlay

SUSPICIOUS: mostly coherent local overlay-management behavior with proportionate file access, but it introduces persistent modifications to agent command behavior and relies on a local external CLI feature (`maestro overlay`) that could not be verified in official CLI references reviewed. No credential harvesting, exfiltration, or third-party proxy data flows are present. Primary risk is install trust and persistent behavioral modification, not confirmed malware.