sgdk-testing

SUSPICIOUS. The skill’s purpose and capabilities mostly align with SGDK testing, and it does not seek credentials or exfiltrate data. However, its primary build path relies on executing an unpinned third-party Docker image (ewrogers/sgdk:latest) rather than a verifiable same-org upstream image, which creates high supply-chain risk disproportionate to a documentation/testing skill.