figma-to-swiftui

Pass

Audited by Gen Agent Trust Hub on Jun 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes local shell utilities including rg (ripgrep) to inventory existing project components and tokens, and sips (Scriptable Image Processing System) to resize and process PNG assets for Xcode catalogs. These commands are limited to local project maintenance and are standard for iOS development tasks.
  • [EXTERNAL_DOWNLOADS]: The skill downloads design assets from a local Figma MCP server (localhost). The instructions specify using curl to fetch from http://localhost:PORT, which is an established safe practice for retrieving design data from the local Figma bridge during active sessions.
  • [SAFE]: The skill follows security best practices by encouraging the reuse of existing project secrets and configurations instead of hardcoding values. It also includes specific sanitization guidelines for asset naming to prevent issues with shell special characters.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 29, 2026, 07:45 AM