figma-sync
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from git logs and source code which could contain malicious instructions.
- Ingestion points: SKILL.md (Step 1) instructs the agent to read output from git log and git show.
- Boundary markers: No explicit delimiters are specified for the ingested data.
- Capability inventory: The skill executes git commands and modifies local record files.
- Sanitization: Git output is not sanitized before processing.
- [DYNAMIC_EXECUTION]: The scripts/figma-diff.js script uses require() to load configuration from paths provided via command-line arguments.
- [COMMAND_EXECUTION]: The scripts/figma-diff.js script executes git commands via execFileSync.
- [EXTERNAL_DOWNLOADS]: The skill references external plugins and console scripts hosted in the vendor's GitHub repository (matthewzammit/skills) for font management.
Audit Metadata