The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes scripts/fetch-stitch.sh, which uses curl to download design assets. This is a functional requirement for retrieving Stitch HTML from Google Cloud Storage URLs provided by the Stitch MCP tools and is accompanied by clear usage instructions for the agent to ensure safe execution.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface as it parses HTML from Stitch designs to generate Vue components. While this is a standard attack surface for conversion tools, the risk is addressed through detailed component contracts and architectural rules that guide the agent's parsing behavior.
Ingestion points: HTML design files downloaded via scripts/fetch-stitch.sh and metadata from stitch-mcp-get-screen.
Boundary markers: Explicit architectural rules in SKILL.md and component mapping contracts in references/contract.md.
Capability inventory: Execution of shell scripts (bash), package management (npm), and file writing (.vue, .js files).
Sanitization: The process of mapping design elements to a predefined set of Vant 4 components acts as a functional filter for the content.

stitch-vue-vant-components