stitch-pipeline
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill ingests user-provided prompts via
$ARGUMENTSto influence the design generation and adoption process. It lacks boundary markers to isolate this external input from the agent's core instructions, creating a surface for indirect prompt injection where a malicious prompt could attempt to steer the autonomous build or cleanup phases. - Ingestion points: improvement prompts and flags provided in
$ARGUMENTS(SKILL.md). - Boundary markers: Absent.
- Capability inventory: Executes build/test commands, performs file system modifications (cleanup/adoption), and utilizes network access via the Google Stitch MCP.
- Sanitization: Absent.
- [COMMAND_EXECUTION]: During the verification phase, the skill autonomously executes project-specific build and test commands. While consistent with its purpose as a development automation tool, this provides a pathway for executing code defined in the project's local build configuration.
- Evidence: Phase 5.1 instructions specify 'Run the project's build/compile command' and 'Run existing tests'.
Audit Metadata