Back to skill
Skillv1.0.0
VirusTotal security
Pencil Design · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 15, 2026, 3:01 PM
- Hash
- 375803785c50d35f85f208f8429b8be0eef907e6761e4b899618eb6af3e12c14
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: pencil-design Version: 1.0.0 The skill bundle provides a legitimate interface for the Pencil CLI design tool, allowing an agent to generate UI mockups and graphics. While the SKILL.md includes instructions for the agent to self-update by fetching its own definition from remote CDNs (unpkg.com/jsDelivr) and suggests using curl to install itself into configuration directories, these actions are clearly documented as maintenance procedures to stay in sync with the CLI version. There is no evidence of data exfiltration, malicious execution, or deceptive prompt injection.
- External report
- View on VirusTotal