技能详情(站内镜像,无评论)
作者:Mus Titou @a2mus
许可证:MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本:v1.0.0
统计:⭐ 1 · 1.1k · 3 current installs · 3 all-time installs
⭐ 1
安装量(当前) 3
🛡 VirusTotal :可疑 · OpenClaw :可疑
Package:a2mus/stitch-ui-designer
安全扫描(ClawHub)
- VirusTotal :可疑
- OpenClaw :可疑
OpenClaw 评估
The skill's instructions broadly match a UI-design-with-Stitch purpose, but it asks the agent to run external tooling (npx, mcporter) and to rely on Google Cloud auth without declaring or justifying required credentials or explaining where mcporter/stitch-mcp-auto come from.
目的
Name/description (design & export UIs via Google Stitch) align with the runtime actions (call stitch.generate_screen_from_text, fetch image/code). Requiring npx and an MCP runner (mcporter) is consistent. However, the SKILL.md references Google Cloud authentication and the GOOGLE_CLOUD_PROJECT env var but the skill lists no required env vars or primary credential — that omission is inconsistent and could hide necessary access to user GCP crede…
说明范围
The instructions stay within the UI-design flow: configure mcporter, run stitch commands to generate previews and code, and only fetch code after user approval. They do instruct performing gcloud auth and possibly configuring a project ID, which implies use of user Google credentials. The instructions do not request arbitrary filesystem scans or unrelated credentials, but they give the agent discretion to run npx and mcporter commands which ma…
安装机制
There is no install spec (instruction-only), which lowers direct risk, but the skill explicitly instructs using `npx -y stitch-mcp-auto` and `mcporter`. npx will fetch and execute code from the npm registry (remote code execution risk) and mcporter is an unfamiliar binary with no provenance or install guidance in the skill. The skill does not document how mcporter should be obtained or vetted.
证书
The skill does not declare required env vars or credentials, yet the README explicitly expects Google Cloud authentication and mentions the GOOGLE_CLOUD_PROJECT env var. Requesting (or prompting for) gcloud auth is appropriate for a Google Stitch integration, but the lack of declared credentials/primaryEnv is a mismatch and prevents informed consent about which secrets will be used or needed.
持久
The skill is not always-enabled and does not request persistent system configuration in its spec. It permits autonomous invocation (platform default), but nothing in the metadata indicates it would modify other skills or system-wide settings.
安装(复制给龙虾 AI)
将下方整段复制到龙虾中文库对话中,由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库(龙虾 AI)执行:为本机安装 OpenClaw 技能「Stitch Ui Designer」。简介:Design, preview, and generate UI code using Google Stitch (via MCP). Helps deve…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装:https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/a2mus/stitch-ui-designer/SKILL.md
(来源:yingzhi8.cn 技能库)
SKILL.md
---
name: stitch-ui-designer
version: 1.0.0
description: Design, preview, and generate UI code using Google Stitch (via MCP). Helps developers choose the best UI by generating previews first, allowing iteration, and then exporting code.
metadata:
openclaw:
emoji: 🎨
requires:
bins: ["npx", "mcporter"]
---
# Stitch UI Designer
This skill allows you to design high-quality user interfaces using Google Stitch.
## Workflow
Follow this process to help the user design a UI:
1. **Setup (First Time Only)**
- Check if the `stitch` server is configured in `mcporter`.
- If not, configure it: `mcporter config add stitch --command "npx" --args "-y stitch-mcp-auto"`
- Ensure the user is authenticated with Google Cloud (the tool may prompt for `gcloud auth`).
2. **Generate & Preview**
- Ask for a description of the interface (e.g., "Login screen for a crypto app").
- Use `stitch.generate_screen_from_text` with the prompt.
- **Important**: This returns a `screenId`.
- Immediately fetch the preview image using `stitch.fetch_screen_image(screenId)`.
- Show the image to the user. Do **not** fetch the code yet.
3. **Iterate & Customize**
- Ask the user for feedback on the preview.
- If changes are needed, use `stitch.generate_screen_from_text` again (potentially using `stitch.extract_design_context` from the previous screen to maintain style) or just refine the prompt.
- Show the new preview.
4. **Export Code**
- Once the user approves the design ("This looks great"), fetch the code.
- Use `stitch.fetch_screen_code(screenId)`.
- Present the HTML/CSS code or save it to a file as requested.
## Tools (via mcporter)
Call these using `mcporter call stitch.<tool_name> <args>`:
- **generate_screen_from_text**
- Args: `prompt` (string), `projectId` (optional, usually auto-detected by `stitch-mcp-auto`)
- Returns: `screenId`, `name`, `url`
- *Use this to start a design.*
- **fetch_screen_image**
- Args: `screenId` (string)
- Returns: Image data (display this to the user).
- *Use this to show the preview.*
- **fetch_screen_code**
- Args: `screenId` (string)
- Returns: `html` (string), `css` (string), etc.
- *Use this ONLY after user approval.*
- **create_project**
- Args: `name` (string)
- *Use if no project exists.*
## Tips
- **Project Context**: `stitch-mcp-auto` tries to manage the project ID automatically. If you get errors about missing project IDs, ask the user to create or select a Google Cloud project first using `create_project` or by setting the `GOOGLE_CLOUD_PROJECT` env var.
- **Preview First**: Always prioritize the visual preview. Generating code for a bad design wastes tokens and time.
- **Stitch MCP Auto**: We use `stitch-mcp-auto` because it handles the complex Google auth setup more gracefully than the standard package.