stitch-react-components
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes a bash script (
scripts/fetch-stitch.sh) to download HTML content from user-supplied URLs or Stitch-generated download links usingcurl. - [COMMAND_EXECUTION]: The skill executes local shell scripts to perform downloads and uses standard Node.js package managers (
npm,npx) for project initialization and component library installation. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: External HTML content is fetched and saved to
temp/source.htmlfor parsing and conversion. - Boundary markers: No specific boundary markers or instructions to ignore embedded instructions are implemented.
- Capability inventory: The agent has access to file system operations (
Read,Write), shell execution (Bash), and thestitchMCP toolset. - Sanitization: The skill lacks explicit sanitization or validation of the input HTML, presenting a surface where malicious instructions could be embedded in the source markup.
Audit Metadata