figma-icons-iconify
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches icon assets from the Iconify API (
api.iconify.design). This is the primary intended behavior for retrieving UI components from a well-known public service. - [COMMAND_EXECUTION]: Utilizes the
Bashtool to executecurlcommands for retrieving SVG and JSON data. The instructions specify this method to bypass technical limitations encountered with standard web fetching tools. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external endpoints and passes it to design tools, creating a surface for potential injection through malformed assets.
- Ingestion points: SVG strings and icon metadata are retrieved from the Iconify API via
curland passed to theuse_figmatool. - Boundary markers: None; external content is interpolated into JavaScript strings for the
use_figmacall. - Capability inventory: The skill possesses
Bashexecution for network operations anduse_figmafor modifying design documents. - Sanitization: The skill does not explicitly validate the structure of the fetched SVG data before passing it to
figma.createNodeFromSvg().
Audit Metadata