sgdk-streaming

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The assets/streaming-lab/tools/build.py script uses subprocess.run() to execute Docker commands. This is used to pull and run the SGDK build environment in a container, which is a standard development practice for cross-compiling Sega Genesis software. The command is constructed as a list of arguments, avoiding shell injection risks.
  • [EXTERNAL_DOWNLOADS]: The build process involves pulling the ewrogers/sgdk:latest Docker image. This resource belongs to the skill author and provides the necessary toolchain (GCC, SGDK) to compile the project. This is considered normal vendor functionality for this type of development utility.
  • [REMOTE_CODE_EXECUTION]: While the skill pulls and runs a Docker container, the environment is controlled and used for the intended purpose of building the provided source code. No arbitrary remote script execution was found.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 02:32 AM