figma-researcher

Pass

Audited by Gen Agent Trust Hub on Apr 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill guides the agent in using the Figma MCP server to retrieve design specifications like colors, typography, and layout from Figma files.
  • [SAFE]: Installation instructions refer to the official Figma domain (mcp.figma.com), which is a well-known and trusted service for this context.
  • [SAFE]: No malicious patterns such as prompt injection, obfuscation, or unauthorized data exfiltration were detected.
  • [SAFE]: The skill includes practical guidelines for handling screenshot size limits and efficiently researching components to minimize context window usage.
  • [SAFE]: The skill possesses a data ingestion surface through Figma tools (get_metadata, get_design_context) but lacks any dangerous capabilities (exec, eval, subprocess) to exploit. Boundary markers and sanitization are absent, which is typical for this type of research tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 22, 2026, 10:37 AM