megadev-raster
Warn
Audited by Socket on Oct 20, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s purpose and technical guidance are coherent for Mega CD raster development, and there is no credential harvesting, exfiltration, or malicious command content in the provided files. The main issue is install/execution trust: it requires running an unpinned mutable third-party container image whose publisher does not clearly match the referenced upstream project, creating a high supply-chain risk inconsistent with a low-trust documentation skill.
Confidence: 90%Severity: 78%
Audit Metadata