figma-to-swiftui
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local shell utilities including
rg(ripgrep) to inventory existing project components and tokens, andsips(Scriptable Image Processing System) to resize and process PNG assets for Xcode catalogs. These commands are limited to local project maintenance and are standard for iOS development tasks. - [EXTERNAL_DOWNLOADS]: The skill downloads design assets from a local Figma MCP server (localhost). The instructions specify using
curlto fetch fromhttp://localhost:PORT, which is an established safe practice for retrieving design data from the local Figma bridge during active sessions. - [SAFE]: The skill follows security best practices by encouraging the reuse of existing project secrets and configurations instead of hardcoding values. It also includes specific sanitization guidelines for asset naming to prevent issues with shell special characters.
Audit Metadata