figma-use-slides
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [Indirect Prompt Injection Surface]: The skill is designed to ingest and process untrusted data from user briefs and reference Figma files to guide deck creation and editing. This introduces a surface where instructions could potentially be embedded in the input data to influence the agent's behavior.
- Ingestion points: User-provided briefs and links to reference Figma files (SKILL.md).
- Boundary markers: The instructions lack explicit delimitation or specific warnings to ignore instructions embedded within the user-provided data.
- Capability inventory: The skill utilizes the
use_figmatool to execute JavaScript code for reading and modifying Figma file content (slide-content.md, slide-lifecycle.md). - Sanitization: No explicit sanitization or validation logic is provided for the user-supplied content within the skill's guidelines.
Audit Metadata