seed-dev-figma-v3-migration-plugin
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands for development workflows, including dependency installation and metadata extraction.\n
- Evidence: Commands such as
bun install,bun extract, andbun run typecheck:mainare specified inreferences/guide.mdfor tool management.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process metadata extracted from the Figma API, which creates a surface for indirect instructions to be processed by the agent.\n - Ingestion points:
src/main/data/__generated__/(generated TypeScript definition files from Figma metadata).\n - Boundary markers: None identified in the provided instructions.\n
- Capability inventory: Shell command execution (
bun) and file system writes to mapping files (src/main/mapping/).\n - Sanitization: No explicit sanitization or validation logic for the ingested metadata is described.\n- [EXTERNAL_DOWNLOADS]: The skill involves downloading dependencies and configuration data from established sources.\n
- Evidence: The instructions involve using
bun installfor packages andbun extractfor Figma API data.
Audit Metadata