pencil-skill-creator
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate development tool for scaffolding. Its operations are local, transparent, and consistent with its stated purpose of automating the creation of design system skills.
- [COMMAND_EXECUTION]: The skill executes a local script (scripts/init_pencil_design_system_skill.py) to create project folders and files. The script includes logic to normalize and validate project names, which prevents the creation of malformed or arbitrary directory structures.
- [DATA_EXFILTRATION]: No network connections or harvesting of sensitive credentials or files were identified during analysis.
- [REMOTE_CODE_EXECUTION]: The skill does not download third-party code or execute any commands from remote URLs.
Audit Metadata