taste-design-stitch
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download and installation of a design-system utility from the official Google Labs GitHub organization (
google-labs-code/stitch-skills). - [COMMAND_EXECUTION]: Includes shell commands for the agent to detect existing installations and manage the setup of the full skill using the
npx skills addcommand. These operations are restricted to the agent's internal skill directories and do not involve sensitive system paths. - [DYNAMIC_CONTEXT_INJECTION]: Employs shell check syntax (e.g.,
! grep) to verify installation state. These commands are used for environment detection and do not execute malicious code or exfiltrate data.
Audit Metadata