sgdk-save

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's purpose and capabilities are coherent for SGDK save-system guidance, and it does not request credentials or route data to odd endpoints. The main risk is install/execution trust: it directs users to run a mutable, unverifiable third-party Docker image instead of the official SGDK publisher image, which is disproportionate to an otherwise documentation-focused skill.

Confidence: 89%Severity: 72%
Audit Metadata
Analyzed At
Oct 16, 2026, 06:10 AM
Package URL
pkg:socket/skills-sh/ewrogers%2Fsgdk-skills%2Fsgdk-save%2F@66186228ea19f30b4a45c41f3b58b5f91e65c2626838299c4afeebb0725f0ec4