sgdk-levels

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation references a Docker image ewrogers/sgdk:latest as the recommended build environment. This is a vendor-owned resource provided by the author to facilitate the SGDK toolchain without requiring local installation.- [COMMAND_EXECUTION]: The assets/level-lab/README.md file provides a docker run command for building the project. This command mounts the current working directory and executes build scripts (tiled_collision.py and make) inside the container. This is standard practice for SGDK development.- [INDIRECT_PROMPT_INJECTION]: The toolchain ingests Tiled map files (.tmx) which are processed by a Python script to generate C source code.
  • Ingestion points: res/outpost.tmx is parsed by assets/level-lab/tools/tiled_collision.py.
  • Boundary markers: None present in the TMX processing logic.
  • Capability inventory: tiled_collision.py writes to the filesystem (inc/level_data.h, src/level_data.c), and the build process executes shell commands via Docker.
  • Sanitization: The Python script performs validation on XML tags, integer ranges, and GID values to ensure map integrity during processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 08:11 AM