The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses a bash script (scripts/fetch-stitch.sh) to download design content using curl. It also instructs the agent to perform standard development tasks such as npm install, npm run dev, and npm run validate within the project environment.
[EXTERNAL_DOWNLOADS]: The skill facilitates the download of HTML and image assets from the Stitch platform (stitch.withgoogle.com). These downloads are performed using curl inside a script provided with the skill to ensure reliability when dealing with Google Cloud Storage URLs.
[DATA_EXPOSURE]: The skill processes external HTML data to generate React code. While it does not exfiltrate sensitive information, the ingestion of untrusted data from design assets represents an attack surface for indirect prompt injection. However, this risk is minimal as the instructions are scoped to a specific trusted design platform and the data is used for code generation rather than direct execution.

stitch-react-components