figma
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes code snippets that fetch design tokens, components, and assets from Figma's official REST API (
api.figma.com) and associated asset storage. These interactions are directed at well-known services and are essential for the skill's primary functionality of design data extraction. - [SAFE]: Security best practices are followed for authentication; the implementation examples use environment variables (
process.env.FIGMA_TOKEN) rather than hardcoding credentials. - [SAFE]: The skill implements code generation (React and Tailwind CSS) by transforming design metadata into string templates, which is its intended purpose, and does not involve the dynamic execution of generated content.
Audit Metadata