Pencil Skill

• Verdict: Pass
• Confidence: High
• Analyzed: Feb 27, 2026, 6:38 PM
• Findings: 0
• Version: 0.1.0

Overview

This skill's files, instructions, and requirements are consistent with a Node-based tool for creating and editing .pen design files; it does not request unrelated credentials or elevated privileges.

This skill appears coherent: it ships a schema, design rules, and Node CLI scripts for manipulating local .pen files and does not ask for credentials. Before using, review the scripts (scripts/*.mjs) to confirm they only read/write expected .pen files and do not perform unexpected network requests. Run them in a safe environment (sandbox or with backups) and back up any .pen files you care about. If you plan to allow autonomous agent invocation, remember the agent could run these scripts—ensure you trust the agent's prompts or restrict invocation. If you want extra assurance, search the script contents for network calls (fetch, https.request, axios, or child_process exec) before running.