sgdk-streaming

Warn

Audited by Socket on Oct 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s content is largely coherent as an SGDK streaming guide and does not request secrets or exfiltrate data, but its execution footprint includes a third-party unpinned Docker image with unverifiable publisher relationship to SGDK upstream. That supply-chain inconsistency makes the skill medium/high risk despite otherwise benign purpose and data flow.

Confidence: 91%Severity: 74%
Audit Metadata
Analyzed At
Oct 17, 2026, 02:33 AM
Package URL
pkg:socket/skills-sh/ewrogers%2Fsgdk-skills%2Fsgdk-streaming%2F@2978b192cc0616f52cb4e1661ca1ff8ebe26f12a812f2b3f60e579f23fdb6595