stitch-design-taste
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of markdown instructions and a template file. It does not initiate network connections, perform file system modifications, or execute shell commands.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user descriptions to generate design guidelines, creating a surface for potential injection.
- Ingestion points: User-supplied product intent and vibe descriptions processed during the generation of
DESIGN.md(SKILL.md). - Boundary markers: The instructions lack explicit delimiters or warnings to ignore instructions embedded within the user-provided data.
- Capability inventory: The skill has no capabilities for command execution, file system access, or network operations.
- Sanitization: No evidence of input filtering or sanitization was found in the provided instructions.
Audit Metadata