figma-to-swiftui

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the curl command to download assets from a local Figma MCP server and the sips tool for image resizing. Both operations are restricted to localhost and local file paths, which are standard for the intended development workflow.
  • [SAFE]: The skill performs context-aware analysis by reading local project configuration files (e.g., Package.swift, Podfile) to ensure that the generated SwiftUI code is compatible with the project's existing architecture and libraries.
  • [SAFE]: No evidence of prompt injection, obfuscation, or persistence mechanisms was detected. The instructions are transparent and focus on bridging design specifications with native code implementation.
  • [SAFE]: The risk of indirect prompt injection is mitigated by the skill's explicit instructions to treat MCP-provided data as design specifications rather than executable code, requiring the agent to build native SwiftUI views from scratch.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 03:43 PM