figma-variables-tokens-generator

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install a full package from https://github.com/Shanmus4/figma-variables-tokens-generator using the command npx skills add. This is a documented installation flow for bringing external tool capabilities into the agent environment. The source repository is clearly identified.
  • [NO_CODE]: The current file acts only as a pointer or 'stub' for the actual skill. It contains instructions for installation but does not execute logic, perform sensitive file operations, or exfiltrate data itself.
  • [COMMAND_EXECUTION]: The skill provides installation commands (npx skills add ...) and checks for the existence of files on the filesystem to determine if the full skill is already present. These are standard package management operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 09:34 PM