pencil-design

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill is installed from the author's repository (chiroro-jr/pencil-design-skill) using standard tools. It also references well-known design resources from official Tailwind CSS and shadcn/ui documentation.- [INDIRECT_PROMPT_INJECTION]: The skill processes external design data from .pen files, which serves as a potential vector for indirect instructions.
  • Ingestion points: Design nodes and properties are ingested via pencil_batch_get and pencil_get_editor_state in SKILL.md.
  • Boundary markers: The instructions do not define the use of delimiters or 'ignore' instructions for data processed from the design document.
  • Capability inventory: The skill can generate React/Next.js code and modify design files using pencil_batch_design operations.
  • Sanitization: No explicit sanitization or validation of the retrieved design strings is required before they are used in code generation or design updates.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 06:38 PM