sgdk-multiplayer
Warn
Audited by Socket on Oct 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's gameplay/session guidance is coherent and non-exfiltrative, and the autonomy-abuse flag is likely false. However, the install/build trust is inconsistent with the upstream SGDK publisher because it relies on a mutable third-party Docker image (`ewrogers/sgdk:latest`) instead of the official same-org container path, creating a meaningful supply-chain risk without evidence of outright malicious behavior.
Confidence: 90%Severity: 52%
Audit Metadata