stitch-react-vite-dashboard
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill includes defensive instructions in the 'Anti-Patterns' and 'Verification Protocol' sections that explicitly prohibit the storage, printing, or commitment of API keys, MCP secrets, or credential-bearing files.
- [EXTERNAL_DOWNLOADS]: The skill references a source synchronization from Google's GitHub repository ('google-labs-code/stitch-skills'). This is documented as an upstream source for workflow templates and is a well-known service.
- [COMMAND_EXECUTION]: The workflow specifies standard local development operations including running builds, type checks, and responsive design reviews, which are typical for the described React and Vite dashboard development process.
- [SAFE]: Data isolation practices are enforced, requiring that asynchronous data access be kept in typed query hooks separate from presentational components to prevent secret leakage into client-side environment variables.
Audit Metadata