sgdk-raster

SUSPICIOUS. The skill's purpose and instructions are coherent for SGDK raster effects, and it does not request credentials or exfiltrate data. The main risk is install/execution trust: it tells the user to run an unpinned, mutable Docker image from a third-party personal namespace (`ewrogers/sgdk:latest`) with `--pull=always` and full workspace mount, while official SGDK-associated distribution exists elsewhere. This is disproportionate supply-chain risk for a build guide, though not confirmed malware.