The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the Bash tool to start a local development server using npx serve site/public to visually verify generated pages.
[EXTERNAL_DOWNLOADS]: The skill downloads HTML and image assets from remote URLs (htmlCode.downloadUrl and screenshot.downloadUrl) provided by the Stitch MCP tool at runtime. These files are subsequently integrated into the project's public directory.
[INDIRECT_PROMPT_INJECTION]: The skill contains an indirect prompt injection surface because it ingests instructions and context from project files without sufficient sanitization or boundary markers.
Ingestion points: The agent reads the baton file (.stitch/next-prompt.md) for task instructions and consults project state in .stitch/SITE.md and .stitch/DESIGN.md (SKILL.md, Steps 1 and 2).
Boundary markers: None identified; the instructions treat the content of these files as authoritative commands for the agent's next action.
Capability inventory: The skill utilizes Bash for running servers, Write for file system modifications, and stitch*:* tools for generating remote content.
Sanitization: The skill does not describe any validation or filtering of the content read from these files before using it to construct prompts for the generation tools.

stitch-loop