figma-generate-design
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection (Category 8) because it requires the agent to read and interpret external source code and Figma file metadata.
- Ingestion points: Analyzes source code files (e.g., *.figma.tsx, *.figma.js) and inspects properties of existing Figma nodes.
- Boundary markers: The skill does not define explicit delimiters or instructions to ignore potential commands embedded within the processed code or design elements.
- Capability inventory: The skill utilizes
use_figmafor canvas mutation andgenerate_figma_designfor screen captures, providing a mechanism for actions based on interpreted data. - Sanitization: There are no specific instructions for sanitizing or validating content extracted from external sources.
Audit Metadata