stitch-ui-preview
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a comprehensive UI prototyping and preview tool that runs locally. It does not connect to remote services or expose user data.
- [COMMAND_EXECUTION]: The skill includes Python scripts (serve.py) for serving static files locally and Playwright scripts (verify_ui.py, verify_review.py, verify_buttons.py) for automated UI testing. These tools are scoped to the local loopback interface (127.0.0.1) and are standard for development and quality assurance workflows.
- [DATA_EXPOSURE_AND_EXFILTRATION]: While the UI prototype includes forms for API keys and credentials, the application logic (in models.js and settings.js) ensures that these sensitive fields are never saved to localStorage or sent to any external endpoint. Automated tests in verify_ui.py specifically verify that credentials are not leaked to persistent storage.
- [INDIRECT_PROMPT_INJECTION]: The skill processes local HTML exports which could theoretically contain malicious instructions. However, the skill implements a synchronization bridge (preview-bridge.js) that uses an explicit action whitelist and prevents the transfer of sensitive form data between device views, effectively mitigating common injection and data leakage vectors.
Audit Metadata