figma-implement-design
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill file consists of YAML metadata and Markdown documentation. It does not include any scripts, executable commands, or logic that would be automatically executed by the agent.
- [EXTERNAL_DOWNLOADS]: The skill references an external GitHub repository belonging to Figma (a well-known service). The instructions suggest a manual inspection and installation of the upstream bundle by the user rather than automated fetching or execution of remote code.
- [INDIRECT_PROMPT_INJECTION]: The skill's stated purpose is to process external design data from Figma. While this represents a theoretical ingestion surface for instructions embedded in design files, this skill file itself contains no implementation logic to perform such processing, presenting no direct risk in its current form.
Audit Metadata