sgdk-streaming
Warn
Audited by Socket on Oct 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s content is largely coherent as an SGDK streaming guide and does not request secrets or exfiltrate data, but its execution footprint includes a third-party unpinned Docker image with unverifiable publisher relationship to SGDK upstream. That supply-chain inconsistency makes the skill medium/high risk despite otherwise benign purpose and data flow.
Confidence: 91%Severity: 74%
Audit Metadata