stitch-design-md

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s workflow takes a user-provided Stitch project URL/ID, then uses the Stitch MCP to fetch per-screen layout/styles/components (Step 2→Step 3), which means outsider-authored free text contained in that Stitch project can be ingested and summarized into DESIGN.md.