sgdk-collision

SUSPICIOUS. The skill’s functionality is coherent and narrowly scoped for SGDK collision development, with no credential harvesting or exfiltration behavior. The main concern is install trust: it directs users to a mutable third-party Docker image instead of the official SGDK publisher’s container, which raises supply-chain risk but does not make the skill malicious.