enhance-prompt
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs legitimate prompt engineering tasks without any detected malicious behavior.
- [EXTERNAL_DOWNLOADS]: The skill provides a link to the official Stitch documentation hosted by Google for user reference. This is a reference to a well-known service for documentation purposes.
- [INDIRECT_PROMPT_INJECTION]: The skill includes an ingestion surface by reading user input and local
DESIGN.mdfiles to generate prompts. - Ingestion points: User-provided UI ideas and the content of the
DESIGN.mdfile (referenced inSKILL.md). - Boundary markers: The output is structured using markdown headers and specific sections (e.g., 'DESIGN SYSTEM (REQUIRED)'), which helps organize content but does not act as a security delimiter.
- Capability inventory: The skill is configured with
ReadandWritetools to interact with local files within the project context. - Sanitization: No specific sanitization or filtering of the input content is performed before interpolation into the final prompt.
- [COMMAND_EXECUTION]: The skill uses the
Writetool to save generated prompts to local files (e.g.,next-prompt.md) upon user request, which is a standard functional capability for this utility.
Audit Metadata