stitch::generate-design
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses
curlto download design assets (HTML and screenshots) from URLs generated by its internal tools. This is a core functional requirement and does not involve execution of the downloaded content.\n- [SAFE]: File system interactions are limited to the.stitchdirectory for storing project metadata and design files, adhering to the principle of least privilege for local storage.\n- [SAFE]: The prompt enhancement process is designed to transform user intent into structural layout descriptions, which serves as a natural barrier against simple prompt injection attempts.
Audit Metadata