sgdk-streaming
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
assets/streaming-lab/tools/build.pyscript usessubprocess.run()to execute Docker commands. This is used to pull and run the SGDK build environment in a container, which is a standard development practice for cross-compiling Sega Genesis software. The command is constructed as a list of arguments, avoiding shell injection risks. - [EXTERNAL_DOWNLOADS]: The build process involves pulling the
ewrogers/sgdk:latestDocker image. This resource belongs to the skill author and provides the necessary toolchain (GCC, SGDK) to compile the project. This is considered normal vendor functionality for this type of development utility. - [REMOTE_CODE_EXECUTION]: While the skill pulls and runs a Docker container, the environment is controlled and used for the intended purpose of building the provided source code. No arbitrary remote script execution was found.
Audit Metadata