Gen Agent Trust Hub

stitch-design · google-labs-code/stitch-skills

Passed

Provider summary

The skill enables UI design workflows using the Stitch MCP server but contains a surface for indirect prompt injection and uses local commands for asset management. It analyzes existing designs to build a project's design system, which could be exploited if design files contain malicious instructions. It also uses curl to download design assets.

The provider classified the analyzed snapshot as NONE risk. This result applies to the content available at audit time.

Interpretation

Compare the repository, publisher, and installation command before continuing.

Review SKILL.md, scripts, and allowed tools. Artificial Atlas never executes them during indexing.

Use the narrowest possible scope and avoid broad credentials for third-party skills.