google-labs-code/stitch::upload-to-stitch
plugins/stitch-design/skills/upload-to-stitch/SKILL.md
Upload local assets (images, mockups, extracted HTML, design markdown) to a Stitch project. ALWAYS use this skill when you need to upload visual assets, HTML pages, or design docs to Stitch, particularly when direct MCP tool calls fail or truncate due to base64 token limits.
$ install --global
skillsauthnpx skillsauth add google-labs-code/stitch-skills stitch::upload-to-stitchInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Aug 1, 2026, 3:43 AM313.3s2 files scanned
SKILL.md
- name:
- stitch::upload-to-stitch
- description:
- >-
- - "stitch*:
- *
Upload-to-Stitch
Upload local assets (images, mockups, HTML, and markdown files) to a Stitch project using the provided upload script, which bypasses the MCP tool's base64 output token limits.
[!NOTE] The AI model cannot upload files via MCP tools directly because the base64 encoding of even a small file exceeds the model's output token limit (~16K tokens). This script reads the file and sends it directly over HTTP.
Steps
1. Identify Target Project
Use list_projects to find the correct projectId.
2. Get the API Key
Locate your active MCP server configuration file and extract the API key:
- Antigravity:
.gemini/antigravity/mcp_config.jsonor.gemini/jetski/mcp_config.json - Gemini CLI:
~/.gemini/settings.jsonor~/.gemini/extensions/Stitch/gemini-extension.json - Claude Code:
~/.claude.json
Extract:
- API Key: From the
X-Goog-Api-Keyheader or auth argument - MCP URL (optional): From the
httpUrlor endpoint argument (defaults tohttps://stitch.googleapis.com)
[!IMPORTANT] If you cannot find the API key in any of these locations, or if you cannot access these files, you MUST ask the user to provide the Stitch API key. Do not proceed without a valid API key.
3. Run Upload Script
[!WARNING] Checkpoint — User Confirmation Required. Before running the upload script, you MUST pause and present the file(s) to be uploaded (paths, sizes, and types) to the user and wait for explicit approval. Do NOT execute the upload script until the user confirms.
Use run_command to execute the Python script:
python3 <SKILL_DIR>/scripts/upload_to_stitch.py \
--project-id <PROJECT_ID> \
--file-path <PATH_TO_FILE> \
--api-key <API_KEY> \
[--api-url <STITCH_API_URL>] \
[--title <SCREEN_TITLE>] \
[--generated-by <GENERATED_BY>]
[!TIP] macOS / SSL Certificate Troubleshooting: If the upload fails with
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] unable to get local issuer certificate, this means your Python installation does not have root certificate authorities configured.The script automatically attempts to use the
certifipackage to load the CA bundle if it is installed in your python environment. Ifcertifiis not installed, you can either install it (pip install certifi) or manually supply theSSL_CERT_FILEenvironment variable when running the script:SSL_CERT_FILE=$(python3 -c "import certifi; print(certifi.where())") python3 <SKILL_DIR>/scripts/upload_to_stitch.py \ --project-id <PROJECT_ID> \ --file-path <PATH_TO_FILE> \ --api-key <API_KEY> \ [--api-url <STITCH_API_URL>] \ [--title <SCREEN_TITLE>] \ [--generated-by <GENERATED_BY>]
Supported File Types
| Extension | MIME Type |
|:---|:---|
| .png | image/png |
| .jpg, .jpeg | image/jpeg |
| .webp | image/webp |
| .html, .htm | text/html |
| .md | text/markdown |
The script auto-detects MIME type from the file extension.
Script Options
--project-id: Required. The Stitch project ID.--file-path: Required. Path to the local file to upload.--api-key: Required. API key for Stitch authorization.--api-url: Optional. Base URL of the Stitch API. Defaults tohttps://stitch.googleapis.com.--title: Optional. Title for the uploaded screen. When uploading extracted HTML from a web app, set this to the route path of the page (e.g.,'/dashboard','/settings/profile','/inbox') so that the screen name/title in Stitch clearly identifies the route.--generated-by: Optional. Specify how the uploaded file was generated (e.g., 'stitch::extract-static-html' skill, 'Claude Code', 'Codex', 'Gemini' etc.).
Related Skills
google-labs-code/site-md
development
VerifiedTrustedOfficial
Analyze a project description or site requirements and synthesize a project constitution into SITE.md for the Stitch Build Loop
8,115SKILL.mdUpdated Aug 20, 2026
google-labs-code/stitch::extract-static-html
development
VerifiedTrustedOfficial
Extract self-contained static HTML from a built web application or React components by inlining CSS and images. Use this skill whenever you need to capture a specific UI state, share a static version of a page, or prepare assets for Stitch upload, even if the user just asks to 'save the HTML' or 'mock the view'.
7,878SKILL.mdUpdated May 19, 2026
google-labs-code/stitch::extract-design-md
development
VerifiedTrustedOfficial
Extract a comprehensive design system (DESIGN.md) directly from frontend source code — React, Vue, Svelte, Angular, plain HTML/CSS, or any web framework. Analyzes component files, stylesheets, Tailwind configs, theme definitions, and design tokens to produce a rich, Stitch-compatible design system document. Use this skill whenever the user wants to reverse-engineer a design system from an existing codebase, audit the visual language of a project, extract design tokens from source files, or understand the styling patterns in a frontend repo — even if they just say "what does this app look like?" or "pull out the design from this code."
7,878SKILL.mdUpdated May 19, 2026
google-labs-code/stitch::code-to-design
development
VerifiedTrustedOfficial
Convert frontend code (Vite, React, Angular, Vue, etc.) to a Stitch Design by chaining static HTML extraction, design system extraction, and file upload. **ALWAYS** use this skill when the user's intent is to move existing web apps or React/Angular/Vue components into Stitch (e.g., requests to "save", "migrate", or "upload"). You must use this skill even for simple "save" operations, as it is the only way to ensure the design system is extracted and assets are properly linked.
7,878SKILL.mdUpdated May 19, 2026