sgdk-multitasking

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and downloads a Docker image (ewrogers/sgdk:latest) to provide the Sega Genesis Development Kit (SGDK) build environment. This is a vendor-owned resource used for compiling the project.
  • [COMMAND_EXECUTION]: Instructions guide the user to run a Python preparation script and Docker commands to build the ROM. These are standard development workflows for the provided Mega Drive lab experiment.
  • [PRIVILEGE_ESCALATION]: The skill includes assembly code (mt_set_user_stack) that modifies the User Stack Pointer (USP) from Supervisor mode. In the context of the Motorola 68000 CPU and SGDK, this is a legitimate and required operation for implementing task switching and multitasking, and is appropriately documented as a supervisor-only helper.
  • [INDIRECT_PROMPT_INJECTION]: The skill implements a state-machine based mailbox system (MTWork) to handle background jobs. While it ingests 'job' data, the capabilities are restricted to pure-RAM operations (decompression and math), and inputs are validated against expected types and ranges, minimizing the risk of unexpected behavior from data processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 05:47 AM