stitch-mcp
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of design assets, including HTML and image files, using
curl. These downloads target well-known Google service domains (googleapis.com) as part of the primary design export functionality. - [COMMAND_EXECUTION]: The skill utilizes
pnpxandnpxto execute development utilities such as@_davideast/stitch-mcpand@google/design.md. These commands are used for standard developer tasks including project initialization, local site serving, and design system validation. - [EXTERNAL_DOWNLOADS]: Connects to an external Model Context Protocol (MCP) server at
https://stitch.googleapis.com/mcpto provide the agent with specialized design tools.
Audit Metadata