stitch-sdk-usage
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the official @google/stitch-sdk and interacts with the stitch.googleapis.com API, both of which are trusted resources belonging to the skill's author (google-labs-code).
- [SAFE]: Functional capabilities such as uploading local mockups via project.upload() and dynamic tool invocation via callTool() are presented as documented features of the SDK for design orchestration.
- [SAFE]: No malicious patterns, obfuscation, or sensitive data exfiltration attempts were detected; usage of placeholders for credentials aligns with development best practices.
Audit Metadata