Skills stitch-design

📦

stitch-design

Name: stitch-design
Author: google-labs-code

Content revision r1 Medium Risk ⚙️ External commands📁 Filesystem access

Generate Stitch UI Designs

Design prompts often lack the detail needed for consistent, production-quality UI outputs. This skill turns rough requests into structured Stitch MCP workflows, reusable design system notes, and saved design assets.

Supports: Claude Codex Code(CC)

📊 70 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "stitch-design" from https://skillstore.io/skills/google-labs-code-stitch-design.md and its manifest at https://skillstore.io/api/skills/google-labs-code-stitch-design/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/google-labs-code-stitch-design.md Signed manifest GET /api/skills/google-labs-code-stitch-design/manifest Signed lockfile GET /api/skills/google-labs-code-stitch-design/lockfile

Test it

Using "stitch-design". Design a landing page for a mountain resort.

Expected outcome:

A structured Stitch prompt describing serene luxury, glassmorphism surfaces, full-width hero imagery, premium typography, and clear booking calls to action.

Using "stitch-design". Create a design system file from my Stitch project.

Expected outcome:

Project atmosphere summary
Named color roles with hex values
Typography and component styling guidance
Layout principles for future screens

Using "stitch-design". Make this screen feel more professional.

Expected outcome:

Targeted edit guidance that adjusts spacing, hierarchy, shadows, color contrast, and button treatment while preserving the existing layout.

Security Audit

Medium Risk

v6 • 7/9/2026 Open versioned report

Most static findings are false positives caused by Markdown code formatting, UI terminology, and relative documentation links. One medium-risk semantic issue remains: the workflow recommends shell-based downloads of generated HTML and screenshots without explicit validation or confirmation safeguards.

Files scanned

605

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

workflows/text-to-design.md:34-38

Unvalidated Asset Download Command

The workflow tells agents to download HTML and screenshot URLs to .stitch/designs using curl -o via run_command or similar. Without explicit URL validation, filename sanitization, and user confirmation, this can fetch untrusted remote content and write files into the local project.

The instruction directly combines remote URL downloads, shell execution, and local file writes. The intent is legitimate asset management, but the workflow lacks safety constraints around trusted sources and output paths.

Risk Factors

⚙️ External commands (10)

SKILL.md:17 SKILL.md:20 SKILL.md:30 SKILL.md:31 SKILL.md:32 SKILL.md:41 SKILL.md:42 SKILL.md:52-65 SKILL.md:65-68 SKILL.md:68-82

📁 Filesystem access (2)

workflows/text-to-design.md:12 workflows/text-to-design.md:15

Audited by: claude View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/google-labs-code-stitch-design/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/google-labs-code-stitch-design/security.svg)](https://skillstore.io/skills/google-labs-code-stitch-design?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/google-labs-code-stitch-design?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/google-labs-code-stitch-design/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/google-labs-code-stitch-design.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

google-labs-code. (2026). stitch-design security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/google-labs-code-stitch-design/audits/6

BibTeX citation

@techreport{google-labs-code-google-labs-code-stitch-design-2026,
  author = {google-labs-code},
  title = {stitch-design security audit report (audit version 6)},
  institution = {Skillstore},
  year = {2026},
  number = {6},
  url = {https://skillstore.io/skills/google-labs-code-stitch-design/audits/6},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "stitch-design security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
  - name: "google-labs-code"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/google-labs-code-stitch-design/audits/6"
identifiers:
  - type: other
    value: "skillstore:google-labs-code-stitch-design:audit:6"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Create a polished landing page concept

Turn a short product idea into a detailed Stitch prompt and generate a high-fidelity screen.

Maintain visual consistency across screens

Capture colors, typography, spacing, and component style rules from existing Stitch screens.

Refine generated UI with targeted edits

Improve a screen through focused edit instructions instead of regenerating the entire design.

Try These Prompts

Generate a simple page

Design a desktop landing page for a productivity app. Make it clean, trustworthy, and focused on one primary call to action.

Use an existing design system

Generate a pricing page for this Stitch project. Use the existing .stitch/DESIGN.md colors, typography, spacing, and button styles.

Edit a generated screen

Edit the current dashboard screen. Keep the layout, but make the cards feel more premium and improve the empty states.

Create design system documentation

Analyze the representative Stitch screens in this project and create a .stitch/DESIGN.md file with color roles, typography rules, component styling, and layout principles.

Best Practices

Provide the Stitch projectId and intended device type before generation starts.
Create or update .stitch/DESIGN.md before generating multiple related screens.
Use targeted edit workflows for polish when the base layout is already correct.

Avoid

Do not regenerate from scratch for small visual changes or copy adjustments.
Do not download generated assets without checking the source URL and destination path.
Do not use vague prompts when brand tone, platform, or page structure matters.