figma-to-swiftui
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
curlcommand to download assets from a local Figma MCP server and thesipstool for image resizing. Both operations are restricted tolocalhostand local file paths, which are standard for the intended development workflow. - [SAFE]: The skill performs context-aware analysis by reading local project configuration files (e.g.,
Package.swift,Podfile) to ensure that the generated SwiftUI code is compatible with the project's existing architecture and libraries. - [SAFE]: No evidence of prompt injection, obfuscation, or persistence mechanisms was detected. The instructions are transparent and focus on bridging design specifications with native code implementation.
- [SAFE]: The risk of indirect prompt injection is mitigated by the skill's explicit instructions to treat MCP-provided data as design specifications rather than executable code, requiring the agent to build native SwiftUI views from scratch.
Audit Metadata