The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill documentation references a Docker image (ewrogers/sgdk:latest) used to provide the build toolchain for the Sega Genesis Development Kit (SGDK). This is a vendor-owned resource hosted on the well-known Docker Hub registry.
[COMMAND_EXECUTION]: The README and main skill file provide a docker run command to compile C source code into a ROM binary. This is the intended functional purpose of the development lab and does not involve suspicious or unauthorized command execution on the host.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest untrusted data from cartridge SRAM and user-provided password strings, which is a common attack surface for secondary instruction injection.
Ingestion points: Raw bytes read from SRAM logical offsets in storage.c and character strings entered via joypad in main.c.
Boundary markers: The implementation uses fixed-length buffers for both the 32-byte SRAM slots and the 12-character password input.
Capability inventory: The skill's capabilities are confined to the Mega Drive execution environment (VDP graphics and SRAM writes); it has no access to host shell, network, or file system APIs.
Sanitization: The skill implements rigorous validation including CRC-16/CCITT-FALSE checksum verification, magic byte checks (SGSV), and game-logic range validation (e.g., verifying level and life counts).

sgdk-save