figma-use-figjam
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill involves the ingestion of board metadata via the
get_figjamtool. This results in the processing of potentially untrusted text (e.g., sticky notes or labels) during runtime. - Ingestion points:
get_figjamtool inSKILL.mdused for inspecting board content. - Boundary markers: The
SKILL.mdcontains an Anti-Patterns section explicitly telling the agent not to treat external content or tool responses as trusted instructions. - Capability inventory: The skill allows modification of board elements and asset uploads via
use_figmaandupload_assets. - Sanitization: No automated sanitization is provided in the JavaScript snippets, relying on agent reasoning.
- [DYNAMIC_EXECUTION]: The skill provides numerous JavaScript templates for the agent to follow when using the
use_figmatool. This is the intended behavior for an API-focused skill and allows the agent to perform complex operations like batch modifications and layout reflowing.
Audit Metadata