stitch-mcp-generate-variants
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill uses a
promptargument in thegenerate_variantstool to influence design output based on user instructions. - Ingestion points: The
promptargument in thegenerate_variantstool call (SKILL.md). - Boundary markers: Absent; user-provided text is passed directly as a string argument to the tool without explicit delimiters or instructions to ignore embedded commands.
- Capability inventory: The skill is authorized to use the
stitch*:*toolset, allowing it to list, retrieve, and modify design assets (SKILL.md). - Sanitization: No specific sanitization or validation routines for the
promptinput are described within the skill's instructions.
Audit Metadata