sgdk-levels
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation references a Docker image
ewrogers/sgdk:latestas the recommended build environment. This is a vendor-owned resource provided by the author to facilitate the SGDK toolchain without requiring local installation.- [COMMAND_EXECUTION]: Theassets/level-lab/README.mdfile provides adocker runcommand for building the project. This command mounts the current working directory and executes build scripts (tiled_collision.pyandmake) inside the container. This is standard practice for SGDK development.- [INDIRECT_PROMPT_INJECTION]: The toolchain ingests Tiled map files (.tmx) which are processed by a Python script to generate C source code. - Ingestion points:
res/outpost.tmxis parsed byassets/level-lab/tools/tiled_collision.py. - Boundary markers: None present in the TMX processing logic.
- Capability inventory:
tiled_collision.pywrites to the filesystem (inc/level_data.h,src/level_data.c), and the build process executes shell commands via Docker. - Sanitization: The Python script performs validation on XML tags, integer ranges, and GID values to ensure map integrity during processing.
Audit Metadata