implement-design

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a standard integration with Figma via MCP tools. All tool calls (get_design_context, get_metadata, get_screenshot) are used for their intended purpose of extracting design data.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download of assets (images, icons, SVGs) from the Figma MCP server's local endpoint. This is a legitimate part of the design-to-code workflow and utilizes official Figma services.
  • [PROMPT_INJECTION]: No evidence of malicious prompt injection, behavior overrides, or safety filter bypasses was found in the instructions. The instructional language is focused on task-specific compliance.
  • [DATA_EXFILTRATION]: No sensitive local files, credentials, or environment variables are accessed. Data processing is strictly limited to Figma design metadata and assets provided via the user-supplied URL.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 07:17 AM
Security Audit — agent-trust-hub — implement-design