ingest-figma
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands via the
Bashtool to check for environment variables and to executecurlfor data retrieval. These operations are standard for the skill's functionality. - [EXTERNAL_DOWNLOADS]: Fetches design data from the official Figma REST API (
api.figma.com). This interaction is targeted at a well-known service and is necessary for the skill's primary purpose. - [DATA_EXFILTRATION]: Accesses the
FIGMA_TOKENenvironment variable to authorize requests to the Figma API. The token is transmitted securely in HTTP headers to the official API endpoint and is not logged or stored locally.
Audit Metadata