figma-design-tool-workflows
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: Analysis of the skill instructions and reference materials revealed no malicious patterns, obfuscation, or safety bypass attempts. The content is instructional and focused on established design system architecture.
- [EXTERNAL_DOWNLOADS]: The skill references several industry-standard tools and libraries for design systems and CI/CD pipelines. These include packages from well-known and reputable organizations such as Anthropic (@anthropic/figma-mcp-server), Figma (@figma/code-connect), and Chromatic, which are used for their intended architectural purposes. The instructions for these downloads follow standard software development practices.
- [COMMAND_EXECUTION]: Documented shell commands are restricted to standard package management and CLI tool usage (e.g.,
npm,npx,git,aws s3 sync) within the context of developer workflows. There are no instances of piping remote URLs directly into a shell or other risky execution patterns.
Audit Metadata