The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests data from the Stitch API and HTML source code to generate CSS tokens and markdown documentation. This external data is used to populate templates without explicit sanitization.
Ingestion points: Design metadata retrieved via the get_project and get_screen tools, as well as HTML content downloaded from URLs provided by the API.
Boundary markers: The instructions do not define boundary markers or safety instructions to prevent the agent from obeying instructions that might be embedded in the design data.
Capability inventory: The skill uses Read, Write, and Bash tools to manipulate files and execute scripts.
Sanitization: The skill maps API values (e.g., namedColors, fonts) directly into CSS and Tailwind artifacts without evidence of validation or escaping for the target formats.
[COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute a local script with arguments provided by a remote API.
Evidence: The command bash scripts/fetch-stitch.sh "[htmlCode.downloadUrl]" "temp/source.html" in SKILL.md executes a local script to download design assets using a remote URL as a parameter.

stitch-design-system