sgdk-hardware

SUSPICIOUS. The skill’s behavior largely matches its stated hardware-testing purpose and does not show exfiltration, credential access, or hidden execution. The main issue is install trust: it asks the agent/user to run an unpinned third-party container image whose publisher relationship to SGDK is not verifiable from the evidence, creating significant supply-chain risk.