sgdk-animation

Warn

Audited by Socket on Oct 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s functionality and documentation are broadly aligned with its stated SGDK animation purpose, and it does not request credentials or route data to odd endpoints. The main issue is disproportionate install trust: it asks users to execute an unverified third-party Docker image (`ewrogers/sgdk:latest`) instead of an official or clearly documented SGDK container source, creating a significant supply-chain risk despite otherwise benign scope.

Confidence: 91%Severity: 76%
Audit Metadata
Analyzed At
Oct 17, 2026, 02:32 AM
Package URL
pkg:socket/skills-sh/ewrogers%2Fsgdk-skills%2Fsgdk-animation%2F@64954642fbd14d84a50254fbc8315d6a3a3f19dd2cbde147c6f6b90ada72ce99