stitch-uview-components

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: Analysis of the skill's instructions, metadata, and scripts confirms that it performs legitimate development tasks. The skill focuses on frontend code generation and mapping design tokens to framework components.\n- [EXTERNAL_DOWNLOADS]: The skill utilizes a local shell script (scripts/fetch-stitch.sh) to download design HTML from URLs generated by the Stitch platform. This behavior is documented and necessary for the design-to-code workflow.\n- [COMMAND_EXECUTION]: The skill invokes the Bash tool to run a local utility script for content retrieval. The script implementation follows secure practices, such as quoting variables, to prevent command injection vulnerabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 04:14 AM
Security Audit — agent-trust-hub — stitch-uview-components