dub-flow

Fail

Audited by Socket on Mar 8, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The DubStack PR Flow skill presents a coherent, purpose-aligned workflow for turning staged changes into a branch, commit, and PR stack with user confirmation. It leverages standard tooling (git, gh, and dub) and follows a prudent confirm-before-execute pattern, reducing the risk of unintended actions. Data flows are consistent with typical CI/CD interactions (local git state to remote PRs) and do not indicate credential harvesting or arbitrary external data exfiltration. While there is benign risk related to credential handling in the context of gh authentication, the overall footprint is proportionate to the stated purpose and remains within acceptable safety bounds for a developer tooling assistant.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 8, 2026, 08:01 PM
Package URL
pkg:socket/skills-sh/wiseiodev%2Fdubstack%2Fdub-flow%2F@2db075126df355786ab7b4f611f98bc1f74f03fc