stitch-design-taste
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation refers users to the official Google Stitch platform at labs.google/stitch and suggests utilizing the picsum.photos service for generating placeholder images in design mockups.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to synthesize user-provided design intents into a structured DESIGN.md file that serves as a set of instructions for other AI agents. This process creates a data-processing surface where user inputs influence downstream agent behavior.
- Ingestion points: The skill evaluates user-provided vibe descriptions and project intent as defined in SKILL.md.
- Boundary markers: The generated output template does not include explicit delimiters to separate user content from system instructions.
- Capability inventory: The skill's functionality is limited to text synthesis; it possesses no capabilities for executing code, modifying the file system, or performing network operations beyond referencing external images.
- Sanitization: The skill does not perform sanitization or escaping of the user-provided descriptions before integrating them into the design system output.
Audit Metadata