Skills
Navigate
skills/gabelul/stitch-kit/stitch-loop/Gen Agent Trust Hub

stitch-loop

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local shell script at scripts/fetch-stitch.sh to download generated assets and uses npx serve to launch a local development server for visual verification.
  • [EXTERNAL_DOWNLOADS]: Fetches HTML content and screenshots from Google Cloud Storage through the Stitch MCP interface, referencing official Google domains for service interaction.
  • [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: next-prompt.md, SITE.md, DESIGN.md. 2. Boundary markers: Absent. 3. Capability inventory: Shell execution, file writes, and stitch tool calls. 4. Sanitization: Absent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 09:02 PM