figma
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes data from external Figma designs which could contain malicious instructions.
- Ingestion points: Untrusted design context and metadata are ingested from Figma via the
get_design_contextandget_metadatatools as documented inreferences/figma-tools-and-prompts.md. - Boundary markers: The instructions lack specific delimiters or directives to treat Figma-provided data as untrusted or to ignore instructions embedded within the design.
- Capability inventory: The agent is empowered to generate code and invoke various MCP tools based on the design context.
- Sanitization: No sanitization or validation steps are defined for the information retrieved from the Figma API before it is processed by the agent.
Audit Metadata