skills/ewrogers/sgdk-skills/sgdk-rpg/Socket

sgdk-rpg

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's RPG/SGDK guidance is internally consistent and does not seek credentials or exfiltrate data, but its build instructions rely on an unrelated third-party Docker image tagged `latest` instead of the official SGDK publisher path. This is primarily a supply-chain trust issue rather than confirmed malicious behavior.

Confidence: 91%Severity: 64%

Audit Metadata

Analyzed At

Oct 16, 2026, 06:10 AM

Package URL

pkg:socket/skills-sh/ewrogers%2Fsgdk-skills%2Fsgdk-rpg%2F@3f0dcb3927ce3df58eb3d2405417f8670375bdffa7320b56f370f047cd386d57