sgdk-multiplayer

Warn

Audited by Socket on Oct 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's gameplay/session guidance is coherent and non-exfiltrative, and the autonomy-abuse flag is likely false. However, the install/build trust is inconsistent with the upstream SGDK publisher because it relies on a mutable third-party Docker image (`ewrogers/sgdk:latest`) instead of the official same-org container path, creating a meaningful supply-chain risk without evidence of outright malicious behavior.

Confidence: 90%Severity: 52%
Audit Metadata
Analyzed At
Oct 17, 2026, 02:33 AM
Package URL
pkg:socket/skills-sh/ewrogers%2Fsgdk-skills%2Fsgdk-multiplayer%2F@792d1064a0eb9b4510dac9ff2ab5bcfb3cd80c2b24287e48693c404f6546da26