sgdk-shmup
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The project provides build instructions that utilize a specific Docker image (
ewrogers/sgdk:latest) to compile the game ROM. This is a vendor-provided development environment for the SGDK project. - [COMMAND_EXECUTION]: Asset processing scripts, such as
make_voices.py, use thesubprocessmodule to call local system utilities likeespeak-ngfor voice synthesis. These calls use fixed argument lists and controlled inputs. - [COMMAND_EXECUTION]: The build process involves standard
makeexecution and Python-based ROM finalization tools (finalize_rom.py) which operate on project build artifacts.
Audit Metadata