stitch-vue-bootstrap-components

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime path calls Stitch MCP get_screen to obtain htmlCode.downloadUrl, then runs scripts/fetch-stitch.sh (curl) to download the Stitch HTML from that URL; this HTML is outsider-authored content (from the Stitch design) and becomes readable prose/markup ingested into the agent’s context for parsing/mapping.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs runtime execution of scripts/fetch-stitch.sh with a runtime-provided htmlCode.downloadUrl (e.g. "bash scripts/fetch-stitch.sh "<htmlCode.downloadUrl>" ..."), which uses curl to fetch remote Stitch HTML that is then parsed and directly drives the agent's code-generation/conversion, so the downloaded URL (<htmlCode.downloadUrl>) is a required runtime dependency that controls the agent's output.