dub

SUSPICIOUS: The skill's stated Dub-management purpose is mostly coherent, and its CLI install path appears vendor-consistent via npm. However, it routes authentication and API traffic through Membrane rather than directly to Dub, creating a third-party credential/data mediation layer and a broader proxy/action surface than strictly necessary.