The Agent Skills Directory

[SAFE]: The skill serves as a legitimate technical guide for creating an event-driven design-to-code pipeline between Figma and Anima.
[COMMAND_EXECUTION]: Provides example curl commands to register webhooks with the official Figma API (api.figma.com), which is a well-known and trusted service for this workflow.
[CREDENTIALS_SAFE]: The documentation explicitly instructs users to manage secrets like FIGMA_TOKEN and ANIMA_TOKEN using environment variables and secret managers rather than hardcoding them in source files.
[INDIRECT_PROMPT_INJECTION]: The skill addresses potential injection risks in the webhook handler implementation by including a mandatory passcode verification step against the FIGMA_WEBHOOK_SECRET.
Ingestion points: The webhook handler in src/webhooks/figma-handler.ts ingests a JSON payload from an external endpoint.
Boundary markers: Implements a passcode check (event.passcode) to validate that the request originated from the intended Figma webhook.
Capability inventory: The handler is restricted to logging event metadata and triggering the Anima SDK's generateCode method.
Sanitization: The implementation uses strict event type filtering and passcode validation before processing any external data.

anima-webhooks-events