Skip to content
skillsafebeta
← Report library
Purpose / Other

Enhance Prompt Skill Security Audit

What the author says it does (original text)

Transforms vague UI ideas into polished, Stitch-optimized prompts. Enhances specificity, adds UI/UX keywords, injects design system context, and structures output for better generation results.

Independent security check

Security risks found

Files checked
3
Risks found
3
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.Risks found: 1
Medium risk

Global installation relies on unpinned remote npx tooling and repository content

Source references: 1
What we found

The README tells the user to run npx and globally install a Skill named from a remote repository, without pinning the npm tool version, repository commit, or a content checksum. npx may download and execute the package it resolves.

Why this matters

If the resolved npm package or repository differs from the reviewed version or its supply chain is compromised, code could run with the user's permissions and persistently alter the global Skill directory, affecting later agent sessions. The evidence does not show that either source is currently compromised.

The README explicitly recommends a global npx installation. The command pins neither the npx package version nor a repository commit or checksum, so the resolved installer and repository contents can change over time and write into the global skill environment. This does not show that a supply-chain attack occurred, but it supports a plausible risk. Users can request pinned versions and commit hashes, verify contents, and review in an isolated or non-global environment first.

README.md:3In the instructionsOpen original file
## Install```bashnpx skills add google-labs-code/stitch-skills --skill enhance-prompt --global```
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
Medium risk

Project design-file content may be disclosed through the Stitch prompt

Source references: 3
What we found

The Skill reads DESIGN.md and requires its colors, typography, and component styles to be inserted into the output. Because the default result is intended for copying, that project information can leave the local environment when the prompt is submitted.

Why this matters

If DESIGN.md contains unreleased brand rules, internal component names, client details, or unrelated notes, they may be sent to an external service. The Skill does not require filtering non-design or sensitive material first.

The skill actively looks for the project's DESIGN.md and puts its palette, typography, and component styles into the enhanced prompt, which is returned for the user to copy. If DESIGN.md contains private brand rules or internal component details, those details would leave the local environment when the user submits the prompt to Stitch. Users can ask the author to require confirmation of extracted fields or deny access in projects containing sensitive design material.

SKILL.md:48In the instructionsOpen original file
Look for a `DESIGN.md` file in the current project:**If DESIGN.md exists:**1. Read the file to extract the design system block2. Include the color palette, typography, and component styles3. Format as a "DESIGN SYSTEM (REQUIRED)" section in the output
Show 2 other places
SKILL.md:137In the instructionsOpen original file
## Output Options**Default:** Return the enhanced prompt as text for the user to copy.**Optional file output:** If the user requests, write to a file:- `next-prompt.md` — for use with the `stitch-loop` skill- Custom filename specified by user
SKILL.md:139In the instructionsOpen original file
**Default:** Return the enhanced prompt as text for the user to copy.
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.Risks found: 1
Medium risk

Live web content is allowed to supersede the local Skill rules

Source references: 2
What we found

The Skill requires consulting a web page before processing prompts and explicitly says its recommendations may supersede the local patterns. This lets changing external content influence agent behavior without limiting which facts may be extracted or treating the page as untrusted data.

Why this matters

If the page changes, is compromised, or contains agent-directed instructions, the agent could depart from the audited workflow, seek extra permissions, or process data beyond the user's expectations. The supplied evidence does not show that the current page is malicious.

This is an active prerequisite: before each enhancement, the agent is told to consult a mutable external page and may let it supersede local patterns. Consulting purported official documentation fits the skill's purpose, but the skill neither limits what may be adopted nor says to treat page instructions as untrusted. A compromised or unexpected page could therefore affect agent actions and output. Users can ask for a pinned version, fact-only extraction, and an explicit ban on following page instructions.

SKILL.md:13In the instructionsOpen original file
## PrerequisitesBefore enhancing prompts, consult the official Stitch documentation for the latest best practices:- **Stitch Effective Prompting Guide**: https://stitch.withgoogle.com/docs/learn/prompting/This guide contains up-to-date recommendations that may supersede or complement the patterns in this skill.
Show 1 other places
SKILL.md:15In the instructionsOpen original file
Before enhancing prompts, consult the official Stitch documentation for the latest best practices:- **Stitch Effective Prompting Guide**: https://stitch.withgoogle.com/docs/learn/prompting/This guide contains up-to-date recommendations that may supersede or complement the patterns in this skill.
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

6 instruction sections

The Skill expands a vague UI idea into a Stitch prompt containing platform, visual style, colors, components, and a numbered page structure.

View source
SKILL.md:31In the instructionsOpen original file
Follow these steps to enhance any prompt:### Step 1: Assess the InputEvaluate what's missing from the user's prompt:| Element | Check for | If missing... ||---------|-----------|---------------|| **Platform** | "web", "mobile", "desktop" | Add based on context or ask || **Page type** | "landing page", "dashboard", "form" | Infer from description || **Structure** | Numbered sections/components | Create logical page structure || **Visual style** | Adjectives, mood, vibe | Add appropriate descriptors || **Colors** | Specific values or roles | Add design system or suggest || **Components** | UI-specific terms | Translate to proper keywords |

It looks for and reads DESIGN.md in the current project, then places its colors, typography, and component styles into the output prompt.

View source
SKILL.md:46In the instructionsOpen original file
### Step 2: Check for DESIGN.mdLook for a `DESIGN.md` file in the current project:**If DESIGN.md exists:**1. Read the file to extract the design system block2. Include the color palette, typography, and component styles3. Format as a "DESIGN SYSTEM (REQUIRED)" section in the output

By default, the result is copyable text; the Skill writes next-prompt.md or another named file only when the user requests file output.

View source
SKILL.md:137In the instructionsOpen original file
## Output Options**Default:** Return the enhanced prompt as text for the user to copy.**Optional file output:** If the user requests, write to a file:- `next-prompt.md` — for use with the `stitch-loop` skill- Custom filename specified by user

The installation instructions use npx to perform a global installation from remote, unpinned sources.

View source
README.md:3In the instructionsOpen original file
## Install```bashnpx skills add google-labs-code/stitch-skills --skill enhance-prompt --global```
Start here · InstructionsSKILL.md
enhance-prompt
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records3 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included
  • README.mdFull text included
  • references/KEYWORDS.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • README.mdSupporting file
  • SKILL.mdInstructions
  • references/KEYWORDS.mdSupporting file

Operations mentioned in code and instructions

Run commands
README.md:5In the instructionsOpen original file
```bashnpx skills add google-labs-code/stitch-skills --skill enhance-prompt --global
Install extra software packages
README.md:6In the instructionsOpen original file
```bashnpx skills add google-labs-code/stitch-skills --skill enhance-prompt --global```
Connect to websites
SKILL.md:17In the instructionsOpen original file
- **Stitch Effective Prompting Guide**: https://stitch.withgoogle.com/docs/learn/prompting/
Read files
SKILL.md:51In the instructionsOpen original file
**If DESIGN.md exists:**1. Read the file to extract the design system block2. Include the color palette, typography, and component styles
Lines read
355
File checksum (to compare versions)
3d9c547b1b9cd7c74bc1ceffc80a1f27e5fb5437a7afd50f03d2535f3d24286d