sgdk-graphics

SUSPICIOUS: the skill’s purpose and capabilities are otherwise coherent and there is no credential access or exfiltration, but its recommended build path relies on an unpinned third-party Docker image not verified as the official SGDK publisher. Main risk is supply-chain trust, not confirmed malware.