sgdk-localization

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script assets/language-lab/tools/build.py uses the subprocess module to execute docker commands. These commands pull an environment and run make to compile the C source code into a Mega Drive ROM. The operations are limited to the build output directory and the project source.
  • [EXTERNAL_DOWNLOADS]: The build process involves pulling a specific Docker image ewrogers/sgdk:latest. This image contains the SGDK (Sega Genesis Development Kit) toolchain. As specified in the skill author context, this image originates from the developer's own namespace and is necessary for the ROM compilation process.
  • [DYNAMIC_EXECUTION]: The tool assets/language-lab/tools/catalog.py generates C source files and header files dynamically based on the contents of a JSON translation catalog. This is a standard build-time code generation pattern used to convert human-readable translations into specialized binary formats for the target hardware.
  • [DATA_EXPOSURE]: The tools read project-specific configuration and source files (e.g., catalog.json, rom_head.c) and write to a user-specified build directory. No sensitive system information or user credentials are accessed or transmitted.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 02:47 AM