design-md
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches technical design assets including HTML source code and screenshots from the Stitch platform (withgoogle.com) for analysis.
- [COMMAND_EXECUTION]: Orchestrates calls to the Stitch MCP server using tools like list_projects and get_screen to discover and retrieve project information.
- [DATA_EXFILTRATION]: Accesses and processes screen metadata and design tokens for the purpose of generating local documentation; no unauthorized transmission of sensitive data was identified.
- [PROMPT_INJECTION]: Ingests and processes external HTML content which presents a surface for indirect prompt injection. Ingestion points: HTML code from screen downloadUrl. Boundary markers: Absent. Capability inventory: File system write (DESIGN.md). Sanitization: Absent.
Audit Metadata