design-md
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes technical project assets that could potentially contain hidden instructions designed to influence the agent's behavior.
- Ingestion points: Downloads and parses external HTML/CSS source code and project metadata from the Stitch platform via the Stitch MCP server.
- Boundary markers: The instructions do not include specific delimiters or instructions to ignore embedded prompts within the technical assets being analyzed.
- Capability inventory: The skill utilizes the
web_fetchtool to retrieve remote assets and theWritetool to generate the synthesized documentation file. - Sanitization: There is no mention of sanitizing or filtering the HTML source code before it is interpreted by the agent.
- [EXTERNAL_DOWNLOADS]: The skill retrieves code and documentation from external platforms to perform its core functions.
- Skill Installation: The installation instructions involve fetching a skill package from the
google-labs-code/stitch-skillsrepository. - Asset Fetching: The workflow involves using
web_fetchto download HTML source code and visual screenshots from dynamic URLs provided by the Stitch MCP server tools. - External Guidelines: References official design and prompting documentation hosted on the
stitch.withgoogle.comdomain.
Audit Metadata