sgdk-assets

SUSPICIOUS: the skill’s purpose and file access are otherwise coherent for SGDK asset work, and it does not request credentials or exfiltrate data. The main issue is install/execution trust: it defaults to a mutable third-party Docker image with always-pull behavior, giving that container write access to the project. That makes the skill high security risk from supply-chain exposure, not confirmed malware.