sgdk-best-practices

SUSPICIOUS. The skill’s purpose and capabilities are mostly coherent and non-exfiltrative, and the scanner’s autonomy-abuse finding appears unsupported. The main concern is install trust: it tells users to pull and run an unpinned third-party Docker image from a personal namespace instead of the verifiable official upstream SGDK container, which creates a meaningful but not clearly malicious supply-chain risk.