sgdk-project

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/sgdk.py utility uses subprocess.run to invoke the Docker CLI for containerized builds.
  • This is the primary intended function of the skill.
  • The script uses list(arguments) and shlex-like behavior (via argparse) to avoid shell injection vulnerabilities, explicitly passing arguments as an array.
  • It mounts the user-specified project directory as a bind mount to /workspace inside the container for compilation.
  • The script includes safety checks, such as refusing to overwrite existing directories during initialization (init).
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 06:24 AM