sgdk-testing
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local system commands to manage build environments and run test artifacts.
- Evidence:
assets/test-lab/tools/build.pyinvokesdocker runto build SGDK projects using the vendor-providedewrogers/sgdk:latestimage. - Evidence:
assets/test-lab/tools/qa.pyusessubprocess.runto call local C compilers (such asclangorgcc) and to execute the resulting test runner binaries. - [DYNAMIC_EXECUTION]: The skill generates and executes code at runtime to verify game logic consistency across different platforms.
- Evidence:
assets/test-lab/tools/qa.pycompiles C source files (host.c,lab.c) into a native host binary for logic verification. - Evidence:
assets/test-lab/tools/m68k.pyutilizes theunicornengine to emulate a M68000 processor, executing binary data from Sega Mega Drive ROMs for target-specific logic traces. - [INDIRECT_PROMPT_INJECTION]: The skill processes external JSON data describing game input sequences, which constitutes a potential attack surface, though it is mitigated by strict validation.
- Ingestion points: Replay tapes and trace results stored as JSON files (e.g.,
assets/test-lab/replays/courier.json). - Boundary markers: Data ingestion is strictly delimited by the JSON format and structural validation logic.
- Capability inventory: The skill can execute shell commands (via
subprocess.run) and emulated code (viaunicorn). - Sanitization:
assets/test-lab/tools/qa.pyperforms rigorous type and range checking on all incoming JSON fields before they are used in simulation or compilation headers.
Audit Metadata