bg-dispatch
Enables fire-and-forget background dispatch for coding tasks, allowing agents to run in the background while keeping the main session free.
Install this skill
Security score
The bg-dispatch skill was audited on Jun 4, 2026 and we found 13 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Webhook reference - potential data exfiltration
| 112 | "type": "webhook", |
Webhook reference - potential data exfiltration
| 114 | "url_env": "SLACK_WEBHOOK_URL", |
Webhook reference - potential data exfiltration
| 119 | "type": "webhook", |
Webhook reference - potential data exfiltration
| 121 | "url_env": "FEISHU_WEBHOOK_URL", |
Webhook reference - potential data exfiltration
| 123 | "secret_env": "FEISHU_WEBHOOK_SECRET" |
Webhook reference - potential data exfiltration
| 141 | | `webhook` | HTTP POST to any webhook URL | Team notifications (Slack, Feishu, Discord) | |
Webhook reference - potential data exfiltration
| 144 | ### Webhook Templates |
Webhook reference - potential data exfiltration
| 149 | - **`generic`** — Simple JSON payload (works with any webhook receiver) |
Webhook reference - potential data exfiltration
| 247 | "webhook_slack": true, |
Webhook reference - potential data exfiltration
| 248 | "webhook_feishu": false |
Webhook reference - potential data exfiltration
| 280 | { "type": "webhook", "config": { "url_env": "SLACK_WEBHOOK_URL", "template": "slack" }, "events": ["complete", "progress"] } |
Webhook reference - potential data exfiltration
| 474 | │ ├── webhook.sh # Generic webhook (Slack/Feishu/Discord) |
Access to hidden dotfiles in home directory
| 156 | 4. `~/.bg-dispatch.json` — user config |