← 返回 Skills 市场
Google Stitch MCP
作者
ArielleTolome
· GitHub ↗
· v1.0.0
· MIT-0
247
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install stitch
功能描述
Manage Stitch UI design projects and screens remotely, including creating projects, listing and retrieving screens, and generating or editing UI screens via...
安全使用建议
The skill's instructions clearly use a Stitch API key (STITCH_API_KEY) to call https://stitch.googleapis.com/mcp, but the package metadata did not declare that credential — this mismatch is suspicious. Before installing: verify the publisher/source (is this really an official Google skill?), confirm you obtained the API key from the official Stitch site, and avoid supplying a broad or production API key. Prefer a scoped or test key, restrict allowed origins/referrers if possible, and avoid putting sensitive PII in generation prompts or responses. If you can't verify the publisher or why the metadata omits the required env var, treat the skill as untrusted.
功能分析
Type: OpenClaw Skill
Name: stitch
Version: 1.0.0
The skill bundle provides documentation and instructions for an AI agent to interact with 'Stitch', a Google UI design tool, via a remote MCP server. It includes standard API tool definitions (e.g., list_projects, generate_screen_from_text) and authentication procedures using an API key. All network requests are directed to legitimate Google domains (stitch.googleapis.com), and no malicious code, data exfiltration, or prompt injection attacks were identified in SKILL.md or the provided examples.
能力评估
Purpose & Capability
The SKILL.md describes a Google Stitch MCP toolset (project/screen management and AI generation) and the documented HTTP endpoints and methods are consistent with that purpose. The described functionality (create/list/get projects/screens, generate/edit screens) aligns with the skill name and description.
Instruction Scope
Instructions are limited to calling a remote MCP HTTP endpoint (https://stitch.googleapis.com/mcp) and handling responses. The runtime guidance does not ask the agent to read unrelated local files or secrets, or to call unexpected endpoints. It does, however, instruct the user/agent to set and send an API key via the STITCH_API_KEY env var — which is not declared in the skill metadata (scope mismatch).
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so there is no local installation or third-party download risk.
Credentials
The SKILL.md explicitly recommends and shows use of an API key (STITCH_API_KEY) passed in X-Goog-Api-Key, but the skill's registry metadata lists no required environment variables or primary credential. That omission is an inconsistency: the skill expects a long-lived API key but does not declare it. The API key is proportionate to the described functionality, but the metadata mismatch raises a transparency and trust concern.
Persistence & Privilege
The skill does not request persistent or elevated platform privileges (always:false). It is user-invocable and allows autonomous invocation by default, which is normal; there is no evidence it modifies other skills or system-wide settings.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install stitch - 安装完成后,直接呼叫该 Skill 的名称或使用
/stitch触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release — 8 MCP tools for project/screen management and AI design generation via Google Stitch
元数据
常见问题
Google Stitch MCP 是什么?
Manage Stitch UI design projects and screens remotely, including creating projects, listing and retrieving screens, and generating or editing UI screens via... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 247 次。
如何安装 Google Stitch MCP?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install stitch」即可一键安装,无需额外配置。
Google Stitch MCP 是免费的吗?
是的,Google Stitch MCP 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Google Stitch MCP 支持哪些平台?
Google Stitch MCP 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Google Stitch MCP?
由 ArielleTolome(@arielletolome)开发并维护,当前版本 v1.0.0。
推荐 Skills