sgdk-project
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/sgdk.pyutility usessubprocess.runto invoke the Docker CLI for containerized builds. - This is the primary intended function of the skill.
- The script uses
list(arguments)andshlex-like behavior (viaargparse) to avoid shell injection vulnerabilities, explicitly passing arguments as an array. - It mounts the user-specified project directory as a bind mount to
/workspaceinside the container for compilation. - The script includes safety checks, such as refusing to overwrite existing directories during initialization (
init).
Audit Metadata