figma-use-motion

Pass

Audited by Gen Agent Trust Hub on Jul 20, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Use of External Tooling (ffmpeg): The skill suggests using ffmpeg locally to extract frames from exported videos. While this involves command execution, it is framed as a performance optimization step for the user to verify animation correctness locally rather than re-rendering on the server.
  • Performance and Cost Optimization: The instructions provide detailed guidance on minimizing the cost and time of video exports by reducing resolution, frame rate, and duration, which is a standard operational consideration for this API.
  • Plugin API Boundary Enforcement: The skill explicitly instructs the agent to use public Plugin API schemas and bail out if internal or unsupported API fields are detected, which helps maintain execution within expected boundaries.
  • Metadata and UI State Management: The skill focuses on reading and writing standard Figma node properties (opacity, transforms, colors) and animation metadata, which is consistent with its stated purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 20, 2026, 08:33 AM
Security Audit — agent-trust-hub — figma-use-motion