sgdk-scenes

SUSPICIOUS: the skill's functionality matches its SGDK scene-management purpose and it does not request excessive permissions or credentials, but its install path relies on executing an unpinned third-party Docker image (`ewrogers/sgdk:latest`) instead of the official upstream SGDK publisher image. Main risk is supply-chain trust, not confirmed malicious behavior.