sgdk-platformer

SUSPICIOUS: the skill’s purpose and capabilities are coherent for SGDK platformer development, and there is no evidence of credential theft, exfiltration, or hidden execution. The main issue is disproportionate install trust in an unpinned third-party Docker image (`ewrogers/sgdk:latest`) when an official same-project SGDK image appears to exist elsewhere; this makes the build path risky but not clearly malicious.