The Agent Skills Directory

[PERSISTENCE]: The skill provides instructions for the user or agent to persist the FIGMA_OAUTH_TOKEN by adding export statements to shell profile files such as ~/.zshrc or ~/.bashrc. This is a routine configuration step for managing CLI tool credentials.
[EXTERNAL_DOWNLOADS]: Fetches design metadata, screenshots, and assets from Figma's official MCP server at https://mcp.figma.com/mcp. These downloads target a well-known service and are considered safe.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process design data from external Figma nodes, creating a surface for indirect prompt injection.
Ingestion points: Figma layer/frame links and structured design data fetched via the get_design_context tool.
Boundary markers: The instructions do not specify explicit delimiters or ignore instructions for the fetched design data.
Capability inventory: The agent has the capability to write implementation code to the filesystem and execute various Figma MCP tools.
Sanitization: No explicit sanitization or validation of the design node content is described.
[COMMAND_EXECUTION]: The setup instructions involve shell commands for exporting environment variables and modifying configuration files, which are standard for developer tool integration.

figma