figma-enterprise-rbac
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data fetched from Figma's REST API (such as project lists and file content), creating a potential surface for indirect prompt injection if external Figma resources contain malicious instructions.\n
- Ingestion points: Data enters the agent context through API responses from endpoints like
https://api.figma.com/v1/projects/${projectId}/filesdocumented inSKILL.md.\n - Boundary markers: The provided templates do not include specific delimiters or instructions to the agent to ignore embedded content within API responses.\n
- Capability inventory: The skill utilizes network capabilities (
fetch) and file system access (Read,Write,Edittools).\n - Sanitization: No sanitization or validation of the remote API response body is performed before processing.\n- [DATA_EXFILTRATION]: The skill performs legitimate network requests to Figma's official infrastructure for authentication and resource management.\n
- Evidence: Instructions in
SKILL.mdand reference files usefetchto communicate withapi.figma.comandwww.figma.comto manage Enterprise features. These connections are necessary for the skill's intended functionality.
Audit Metadata