sgdk-animation
Warn
Audited by Socket on Oct 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s functionality and documentation are broadly aligned with its stated SGDK animation purpose, and it does not request credentials or route data to odd endpoints. The main issue is disproportionate install trust: it asks users to execute an unverified third-party Docker image (`ewrogers/sgdk:latest`) instead of an official or clearly documented SGDK container source, creating a significant supply-chain risk despite otherwise benign scope.
Confidence: 91%Severity: 76%
Audit Metadata