stitch-ui-designer
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references reference implementations and workflow definitions from the Google Labs Code repository on GitHub to maintain consistency with upstream snapshots.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied UI design requirements and transforms them into structured prompts for external design tools. It incorporates defensive measures such as explicit data sanitization instructions (redacting PII like customer names and phone numbers) and a rigid prompt structure to ensure predictable tool behavior.
- [COMMAND_EXECUTION]: The skill orchestrates multiple tool-based operations including project creation, screen generation, and metadata updates. It defines strict validation logic, such as mandatory verification of screen dimensions and explicit confirmation requirements for destructive actions like project deletion.
Audit Metadata