sgdk-collision
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The build utility in assets/collision-lab/tools/build.py uses the subprocess module to execute Docker commands to compile the project. The command is constructed using a list of arguments and constrained inputs to prevent shell injection.
- [EXTERNAL_DOWNLOADS]: The skill build instructions and automated scripts pull the ewrogers/sgdk:latest Docker image. This image contains the GCC compiler toolchain for the Sega Mega Drive and is a known resource associated with the skill's author.
- [SAFE]: The core collision detection and sliding algorithms are implemented in clear C source code located in assets/collision-lab/src/collision.c. No signs of obfuscation, hidden instructions, or unauthorized system access were identified across the skill files.
Audit Metadata