pencil-mcp-batch-design
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified in the skill instructions or examples.
- [PROMPT_INJECTION]: No evidence of prompt injection or instructions to bypass safety guidelines. The use of 'CRITICAL' in the instructions is for intent verification and prerequisites, which are defensive measures to ensure the tool is only used when the user explicitly requests Pencil design tasks.
- [DATA_EXFILTRATION]: No network operations, hardcoded credentials, or access to sensitive local files were detected.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns, external script downloads, or dynamic execution of untrusted code were found.
- [COMMAND_EXECUTION]: No shell command execution or system-level modifications are present.
- [EXTERNAL_DOWNLOADS]: The skill does not perform any external downloads or package installations.
Audit Metadata