design-to-code

SUSPICIOUS: The stated purpose is coherent with Figma-to-code generation, and the flagged prompt/copy-paste patterns are mostly workflow artifacts. However, the skill’s core behavior depends on unseen helper code and unseen dependencies, so data flows and install trust cannot be verified; the CLI-passed Figma token adds moderate exposure risk.