figma-integration
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of instructional documentation and best practices for integrating Figma designs into development workflows. It does not include executable scripts, shell commands, or hardcoded credentials.\n- [INDIRECT_PROMPT_INJECTION]: The skill describes workflows for ingesting data from Figma design files. 1. Ingestion points: Figma API calls such as getFile and getNode. 2. Boundary markers: Not mentioned. 3. Capability inventory: Use of design-to-code conversion tools (F2C MCP). 4. Sanitization: Not specified. While external design data is an entry point for potential indirect prompt injection, this is an inherent surface for the intended task and the skill follows standard integration patterns.
Audit Metadata