figma-to-react-native
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a local Python script (
scripts/generate.py) to automate the conversion of Figma design data into React Native code. This script uses the Python standard library to process JSON input and write TSX files to a user-specified output directory. - [EXTERNAL_DOWNLOADS]: The
scripts/package.jsonfile identifies standard development dependencies such asreact,react-native, andtypescript. These well-known packages are used for type-checking the generated output and are sourced from official registries. - [DATA_EXFILTRATION]: While the skill processes external Figma data that may include image URIs, these are handled as standard props within the generated components. No unauthorized network operations, credential harvesting, or data exfiltration patterns were found.
- [SAFE]: The code generation logic includes security best practices, such as sanitizing input strings in
scripts/figma_rn/emit.py(replacing braces and quotes) to ensure the generated JSX is structurally sound and resistant to injection. The skill is well-documented and its behavior aligns with its stated purpose.
Audit Metadata