stitch-loop
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads project configuration and task files to construct prompts for page generation, creating a surface for indirect instructions.
- Ingestion points: The agent reads content from
next-prompt.md,SITE.md, andDESIGN.mdinSKILL.md(Steps 1 & 2). - Capability inventory: The skill utilizes
Bashfor command execution,Writefor file modification, andchrome*tools for browser interaction as listed in the frontmatter ofSKILL.md. - Boundary markers: Instructions do not specify the use of delimiters or explicit boundary markers when interpolating file content into tool prompts.
- Sanitization: No sanitization or validation of the ingested content is defined before it is passed to the generation tools.
- [COMMAND_EXECUTION]: The skill invokes the
Bashtool to execute shell commands during the visual verification process. - Evidence:
SKILL.md(Step 4.5) instructs the agent to runnpx serve site/publicto host the generated site locally. - [EXTERNAL_DOWNLOADS]: The skill downloads generated assets from remote sources as part of the page creation workflow.
- Evidence:
SKILL.md(Step 3.4) directs the agent to download content fromhtmlCode.downloadUrlandscreenshot.downloadUrlprovided by the Stitch MCP tools.
Audit Metadata