pencil-design
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is installed from the author's repository (
chiroro-jr/pencil-design-skill) using standard tools. It also references well-known design resources from official Tailwind CSS and shadcn/ui documentation.- [INDIRECT_PROMPT_INJECTION]: The skill processes external design data from .pen files, which serves as a potential vector for indirect instructions. - Ingestion points: Design nodes and properties are ingested via
pencil_batch_getandpencil_get_editor_statein SKILL.md. - Boundary markers: The instructions do not define the use of delimiters or 'ignore' instructions for data processed from the design document.
- Capability inventory: The skill can generate React/Next.js code and modify design files using
pencil_batch_designoperations. - Sanitization: No explicit sanitization or validation of the retrieved design strings is required before they are used in code generation or design updates.
Audit Metadata