The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the Bash tool to execute a bundled Python script, scripts/init_stitch_skill.py. This script automates filesystem tasks such as directory creation and file writing. It uses a restrictive regular expression (stitch-ui-[a-z0-9]+(?:-[a-z0-9]+)*-designer) to validate user-supplied scenario names, which effectively prevents directory traversal or command injection through user input.
[INDIRECT_PROMPT_INJECTION]: As a scaffolding tool that generates instruction files (SKILL.md) for other skills, it uses static templates and strict validation of dynamic components to ensure that generated skills adhere to safety standards and expected output formats.
[SAFE]: No evidence of credential exposure, data exfiltration, obfuscation, or persistence mechanisms was found. The skill operates within its declared scope and follows secure coding practices for its automated tasks.

stitch-skill-creator