figma-to-code
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill correctly instructs users to manage sensitive credentials like Figma access tokens through environment variables (process.env.FIGMA_ACCESS_TOKEN) and GitHub Secrets, avoiding hardcoded secrets. \n- [SAFE]: Network activity is restricted to the official Figma REST API (api.figma.com) for the purpose of retrieving design variables. \n- [SAFE]: Dependencies such as style-dictionary and common development tools like ts-node are widely used and trusted in the software development community. \n- [SAFE]: GitHub Actions utilized in the example workflow (actions/checkout, actions/setup-node, peter-evans/create-pull-request) are reputable and standard for CI/CD automation. \n- [SAFE]: No evidence of prompt injection, obfuscation, or unauthorized data exfiltration was found within the documentation or code snippets.
Audit Metadata