pencil-mcp-get-variables
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes design tokens from external files, establishing a surface for indirect prompt injection.\n
- Ingestion points: Design data is ingested from local
.penfiles through theget_variablestool call as described inSKILL.md.\n - Boundary markers: The instructions do not provide delimiters or warnings to isolate external data from the agent's core instructions.\n
- Capability inventory: The retrieved variable values are used to execute
batch_designoperations, meaning untrusted content could influence agent-initiated design changes (SKILL.md).\n - Sanitization: The skill lacks instructions for validating or escaping the content of the design tokens before they are processed by the agent.
Audit Metadata