sgdk-multitasking
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and downloads a Docker image (
ewrogers/sgdk:latest) to provide the Sega Genesis Development Kit (SGDK) build environment. This is a vendor-owned resource used for compiling the project. - [COMMAND_EXECUTION]: Instructions guide the user to run a Python preparation script and Docker commands to build the ROM. These are standard development workflows for the provided Mega Drive lab experiment.
- [PRIVILEGE_ESCALATION]: The skill includes assembly code (
mt_set_user_stack) that modifies the User Stack Pointer (USP) from Supervisor mode. In the context of the Motorola 68000 CPU and SGDK, this is a legitimate and required operation for implementing task switching and multitasking, and is appropriately documented as a supervisor-only helper. - [INDIRECT_PROMPT_INJECTION]: The skill implements a state-machine based mailbox system (
MTWork) to handle background jobs. While it ingests 'job' data, the capabilities are restricted to pure-RAM operations (decompression and math), and inputs are validated against expected types and ranges, minimizing the risk of unexpected behavior from data processing.
Audit Metadata