sgdk-dialogue

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a development framework for SEGA Genesis games, providing source code, documentation, and build scripts consistent with its stated purpose.
  • [COMMAND_EXECUTION]: The build instructions utilize Docker to compile the project into a Mega Drive ROM. The referenced image ewrogers/sgdk:latest is a vendor resource belonging to the skill's author and is used to provide a consistent cross-platform build environment.
  • [DYNAMIC_EXECUTION]: The compile_dialogue.py script generates C source and header files from JSON dialogue data. This tool implements extensive input validation, including checks for printable ASCII characters, tag nesting limits, and identifier patterns, ensuring that generated code is based on validated structured data.
  • [INDIRECT_PROMPT_INJECTION]: While the skill processes external JSON data, the ingestion process in compile_dialogue.py is highly sanitized with strict schema enforcement and explicit limits on token counts and nesting, effectively mitigating data-driven instruction injection within the build pipeline.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 03:03 AM