Is an early version of the application with no unit tests and it eagerly calls `sh` command with string input ( see: https://github.com/egoist/maid/blob/master/lib/index.js )
I would be worried that some parse error or non-obvious typo in the Markdown format could result in `sh` accidentally running something destructive locally.
Still though, I like the idea and am now following the project, you should keep working on it!
You may want to consider running the Node tasks in a separate subprocess instead of using `require-from-string` module in parent process. You could also try using https://github.com/stackvana/microcule to add support for subprocess execution and multiple programming languages.