stitch-design
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external design data, which creates a surface for indirect instructions to be passed to the agent.
- Ingestion points: Data is read from
.claude/design/design-system.mdand user-provided HTML/CSS exports from the Stitch web interface. - Boundary markers: The skill does not provide specific instructions to the agent to use delimiters or protective boundary prompts when handling these external data sources.
- Capability inventory: The agent has the capability to generate and modify screens, interact with design system tokens, and download visual assets (PNGs).
- Sanitization: There is no evidence of sanitization or validation of the ingested design system content or HTML code before it is interpolated into agent prompts.
- [EXTERNAL_DOWNLOADS]: The skill connects to Google's official Stitch MCP server at
https://stitch.googleapis.com/mcpand references thegoogle-labs-code/stitch-skillsrepository for advanced workflows.
Audit Metadata