stitch-generate-design

SUSPICIOUS. The skill’s purpose and capabilities are mostly coherent for a design-generation workflow, and there is no clear malicious behavior in the skill text. The main risks are external MCP trust ambiguity, unrestricted downloading of returned asset URLs via Bash, and transitive delegation to other skills. If used only with the official Google Stitch SDK/MCP endpoint, risk is moderate; with an unverified third-party MCP server, risk increases substantially.