stitch-design
Unified entry point for Stitch design work. Handles prompt enhancement (UI/UX keywords, atmosphere), design system synthesis (.stitch/DESIGN.md), and high-fidelity screen generation/editing via Stitch MCP.
Security
2 findings — 2 medium severity. This skill can be installed but you should review these findings before use.
W011: Third-party content exposure detected (indirect prompt injection risk)
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
Third-party content exposure detected (high risk: 0.80). The generate-design-md workflow explicitly instructs the agent to call get_screen and then use read_url_content to fetch HTML (htmlCode.downloadUrl) and screenshots from project asset URLs and to analyze those user-generated HTML/screenshots to extract colors, geometry, and other tokens that will directly drive design decisions, which exposes the agent to untrusted third-party content.
W012: Unverifiable external dependency detected (runtime URL that controls agent)
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
Potentially malicious external URL detected (high risk: 0.90). The skill's generate-design-md workflow explicitly fetches runtime assets via screenshot.downloadUrl and htmlCode.downloadUrl (retrieved and fetched with read_url_content) and ingests that remote HTML/screenshot content to synthesize the .stitch/DESIGN.md which is then used to control and enhance prompts, so these runtime download URLs are a high-confidence external dependency.
- Repository
- google-labs-code/stitch-skills
- Commit
6c0cbdb
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.