stitch
Warn
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONMETADATA_POISONING
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is configured to fetch the
stitch-design-clipackage from the public NPM registry when the local binary is missing. - [REMOTE_CODE_EXECUTION]: The skill utilizes
npx -yto execute the externalstitch-design-clipackage. The-yflag suppresses user confirmation, leading to the automatic execution of remote code in the local environment. - [METADATA_POISONING]: The skill metadata and documentation repeatedly characterize the
stitch-design-clipackage as the 'official SDK-backed' tool for Google Stitch. This claim of official status for a package without an official namespace may lead users to grant it higher trust and permissions than appropriate for a third-party utility. - [COMMAND_EXECUTION]: The skill facilitates the execution of various shell commands via the
stitchbinary, including operations that process sensitive authentication states and project configurations.
Audit Metadata