The Agent Skills Directory

[COMMAND_EXECUTION]: The skill documentation includes examples of using curl to interact with the Figma API. These examples correctly use environment variables ($FIGMA_TOKEN) rather than hardcoded credentials, following secure development practices for tool-assisted API calls.- [EXTERNAL_DOWNLOADS]: The skill references various official documentation and resources from well-known and trusted organizations such as the W3C (WCAG guidelines, Design Token Community Group), Amazon (Style Dictionary), and Figma. These links are for informational purposes and provide standards for implementation.- [REMOTE_CODE_EXECUTION]: The included validation script (scripts/validate_skill.py) uses standard Python libraries and declares well-known dependencies (pyyaml, jsonschema) via the PEP 723 format. The script performs static analysis using regular expressions and JSON schema validation; it does not execute arbitrary code or perform unsafe network operations.- [DATA_EXFILTRATION]: The instructions explicitly include safety rules prohibiting the hardcoding of secrets and credentials. It mandates the use of environment variables for sensitive tokens, which reduces the risk of credential harvesting and accidental data exposure.- [SAFE]: The skill is well-documented with clear boundaries, including near-miss negative test cases to prevent accidental activation for non-relevant tasks. Its primary focus is on frontend engineering quality (accessibility, responsiveness, and design fidelity).

design-to-code