Skills
skills/teachingai/full-stack-skills/pencil-mcp-get-variables/Gen Agent Trust Hub

pencil-mcp-get-variables

Pass

Audited by Gen Agent Trust Hub on Apr 6, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface due to the lack of sanitization when processing external data. Ingestion points: The get_variables tool reads content from a .pen file specified by the filePath parameter in SKILL.md. Boundary markers: The instructions do not define delimiters or specific isolation markers for the data retrieved from the file. Capability inventory: The skill is configured to use the get_variables tool; no other capabilities such as network operations or shell execution are present in the skill files. Sanitization: There are no instructions for the agent to sanitize or validate the design token data before it is incorporated into the conversation context.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 6, 2026, 10:44 AM