sgdk-ai

SUSPICIOUS: the skill’s purpose and capabilities are coherent as an SGDK AI guide, and there is no credential access, exfiltration, stealth behavior, or dangerous pre-execution syntax. The main issue is install trust: it routes builds through an unverified third-party Docker image on a mutable `latest` tag rather than a clearly official, pinned SGDK image.