sgdk-animation
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The build script assets/animation-lab/tools/build.py uses the subprocess.run() function to execute Docker commands. This is a legitimate use of command execution to compile the project's C code within a specialized build environment.
- [EXTERNAL_DOWNLOADS]: The skill's build instructions and automation scripts involve pulling a Docker image (ewrogers/sgdk:latest) from Docker Hub. This image provides the SGDK toolchain and is provided by the skill's author as part of the intended development workflow.
Audit Metadata