Automic Vault

brew package intelligence

mobile-dev-inc/tap/maestro

Automic Vault tracks mobile-dev-inc/tap/maestro because plain text maestro tokens matters when AI agents run command-line tools on macOS.

Read docs Run scanner

overview

What Automic Vault knows about mobile-dev-inc/tap/maestro

This package is present in local Automic Vault package data. The page is generated so package-specific security metadata has a stable URL.

Homepage

Not present in the local metadata.

Commands and aliases

No executable aliases were found in the local package database.

radioisotope

Plain Text Maestro Tokens

Maestro stores cloud login state in ~/.mobiledev/authtoken. Maestro Studio can also store an OpenAI token in ~/.mobiledev/openaitoken. Our isotope stores those token files in the macOS keychain and injects them through a temporary Java user.home while `maestro` runs.

Local README excerpt

Maestro Radioisotope

Maestro stores cloud login state in ~/.mobiledev/authtoken. Maestro Studio can also store an OpenAI token in ~/.mobiledev/openaitoken.

The radioisotope moves those files into the macOS keychain and runs maestro with a temporary Java user.home containing the injected files. It also exports the cloud token as MAESTRO_CLOUD_API_KEY, which Maestro supports for non-interactive cloud authentication.

Caveats

  • Only ~/.mobiledev/authtoken and ~/.mobiledev/openaitoken are migrated.
  • Runtime login/logout and Studio token changes happen in temporary runtime

state and are not persisted back to the keychain.

  • Commands that depend on other files under Java user.home will see the

temporary home while the wrapper runs.

  • Direct execution of the original binary will not receive credentials.

Source: data/radioisotopes/maestro/README.md

Caveats

  • Only ~/.mobiledev/authtoken and ~/.mobiledev/openaitoken are migrated.
  • Runtime login/logout and Studio token changes are not persisted back to keychain.
  • The wrapper runs Maestro with a temporary Java user.home.
  • Direct execution of the original binary will not receive credentials.

install metadata

Resolver facts

Package keybrew:mobile-dev-inc/tap/maestro

source trail

Generated from repository data

This page is regenerated by scripts/generate-pkg-pages.py. Deployments refuse to publish if www/pkg/ is stale relative to local package data.

Used sources

  • local isotope README
  • radioisotope security manifest