The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the figma-pp-cli binary via npx -y @mvanhorn/printing-press-library and go install github.com/mvanhorn/printing-press-library/.... These resources are hosted on public registries (NPM and GitHub) and belong to the declared author's vendor infrastructure.
[DATA_EXFILTRATION]: The skill documents the --deliver webhook:<url> flag, which allows command output to be sent to an arbitrary external URL. Additionally, the feedback command can transmit data to a remote endpoint if the FIGMA_FEEDBACK_ENDPOINT environment variable is configured.
[INDIRECT_PROMPT_INJECTION]:
Ingestion points: The skill ingests untrusted content from external Figma files, including node data, frame descriptions, and user comments via commands like frame extract and comments-audit in SKILL.md.
Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from following instructions embedded within the Figma data.
Capability inventory: The agent is granted Read Bash capabilities, enabling it to execute the CLI tool which can perform network operations and file writes (--deliver file:<path>).
Sanitization: No sanitization or validation routines are specified for the data retrieved from the Figma API before it is interpolated into the agent's context.

pp-figma