sgdk-isometric

SUSPICIOUS. The skill's capabilities match its stated SGDK/isometric documentation purpose and it does not seek credentials or exfiltrate data, but its install flow depends on an unpinned third-party Docker image from an unrelated namespace. That makes the main concern supply-chain trust rather than malicious behavior.