sgdk-rpg
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
assets/adventure-lab/tools/build.pyscript executes thedockercommand viasubprocess.runto compile the game ROM. This is a functional requirement for the skill's build system and uses a structured argument list to avoid shell-related vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill's build process relies on the
ewrogers/sgdk:latestDocker image. This external dependency contains the compilation toolchain and is managed by the skill's author. - [REMOTE_CODE_EXECUTION]: By design, the build system executes the contents of the
ewrogers/sgdkDocker container. This is the intended mechanism for transforming the provided C source code into a functional Sega Genesis ROM.
Audit Metadata