The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses Bash blocks to orchestrate multiple MCP tools and local script calls. It explicitly instructs the agent to execute all steps autonomously and without asking for user confirmation, which reduces oversight for potential malicious actions during tool execution.
[DYNAMIC_EXECUTION]: Implements a shell wrapper function (ss) that dynamically locates and executes a session management script. It uses environment-variable-based path calculation (${CLAUDE_SKILL_DIR}/../../scripts/stitch-session.mjs) to invoke a Node.js script, fitting the pattern of dynamic loading from computed paths.
[EXTERNAL_DOWNLOADS]: Fetches HTML content from remote URLs provided by MCP tools (htmlCode.downloadUrl) and saves them locally via a helper script (scripts/fetch-stitch.sh). These downloads originate from external generation services and are subsequently used as data sources for code conversion.
[INDIRECT_PROMPT_INJECTION]: The design-to-code pipeline creates a vulnerability surface where instructions embedded in the generated HTML from the Stitch service can influence the behavior of framework-specific conversion skills (Next.js, Svelte, etc.).
Ingestion points: The file temp/source.html is populated with content from an external service URL.
Boundary markers: Absent. The skill does not provide markers or instructions to the agent to treat the design content as untrusted or to ignore embedded instructions.
Capability inventory: The orchestrator has access to Bash execution, local file read/write, and a wide array of conversion skills with their own capabilities.
Sanitization: There is no evidence of validation, sanitization, or filtering of the HTML content before it is processed by downstream skills.
[PERSISTENCE]: The skill maintains workflow state by writing numeric project and screen identifiers to disk. This allows the orchestrator to resume long-running design sessions across context compactions, ensuring consistent access to generated project resources.

stitch-orchestrator