dub-flow
Audited by Socket on Mar 8, 2026
1 alert found:
Obfuscated FileThe DubStack PR Flow skill presents a coherent, purpose-aligned workflow for turning staged changes into a branch, commit, and PR stack with user confirmation. It leverages standard tooling (git, gh, and dub) and follows a prudent confirm-before-execute pattern, reducing the risk of unintended actions. Data flows are consistent with typical CI/CD interactions (local git state to remote PRs) and do not indicate credential harvesting or arbitrary external data exfiltration. While there is benign risk related to credential handling in the context of gh authentication, the overall footprint is proportionate to the stated purpose and remains within acceptable safety bounds for a developer tooling assistant.