figma-generate-library

Pass

Audited by Gen Agent Trust Hub on May 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a professional, multi-phase design system workflow (Discovery, Foundations, File Structure, Components, Integration) with mandatory user checkpoints at each transition.
  • [SAFE]: State management is handled robustly using Figma's sharedPluginData for node tagging and a local temporary JSON file for session tracking, which are standard and safe practices for long-running orchestration tasks.
  • [SAFE]: The skill uses read-only discovery tools (inspectFileStructure.js, rehydrateState.js) to establish context before performing any write operations, adhering to the principle of least privilege where possible.
  • [SAFE]: All JavaScript snippets provided in the scripts/ directory utilize standard Figma Plugin API patterns for creating and mutating design elements, with proper font loading and error handling.
  • [SAFE]: The skill identifies the vendor 'figma' as the primary authority, and all proposed actions (such as setting code syntax and Code Connect mappings) align with official Figma developer tools and documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
May 19, 2026, 12:03 PM
Security Audit — agent-trust-hub — figma-generate-library