StitchFlow

Turn briefs, mockups, and product context into Stitch UI screens, design variants, Tailwind-friendly HTML, and screenshots. Use when the user wants to explor...

This skill appears to be a local CLI wrapper that needs a local 'stitch-starter' toolkit and a STITCH_API_KEY stored in a .env file. Before installing or using it: 1) Inspect the GitHub repository and the install.sh script yourself to ensure no unexpected commands (network exfiltration, chmod +x of unknown binaries, downloading from untrusted URLs). 2) Keep the STITCH_API_KEY scoped with least privilege for just the Stitch service, and consider providing it via a dedicated environment variable or secret manager rather than a shared .env if you have other secrets in that folder. 3) Run the installer and CLI inside an isolated environment (container or VM) until you verify behavior. 4) Verify outputs and any network calls (e.g., via network monitoring) the first few runs. 5) Ask the skill author to update registry metadata to declare required env vars and an explicit, verifiable install source — that will make the skill's requirements coherent and easier to audit.

Type: OpenClaw Skill Name: stitchflow Version: 1.3.0 The skill bundle is designed for UI generation but contains a significant shell injection vulnerability. The instructions in SKILL.md and references/cli-usage.md direct the agent to execute shell commands (e.g., 'npm run generate -- --prompt "..."') using user-provided input that has been rewritten by the AI. There is no mention of shell-escaping or sanitization, which could allow an attacker to execute arbitrary commands via prompt injection. Additionally, SKILL.md references an external installation script (install.sh) that is not provided in the bundle, which is a common vector for supply-chain risks.