figma-use
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill enables the agent to ingest and process content from Figma files, creating a surface for indirect prompt injection.
- Ingestion points: The agent reads node names, descriptions, and text content from Figma pages using tools like use_figma and get_metadata.
- Boundary markers: The SKILL.md file includes an Anti-Patterns section that explicitly instructs the agent to not treat external content or tool responses as trusted instructions.
- Capability inventory: The agent has broad write access to the Figma canvas, including node creation and variable management via the use_figma tool.
- Sanitization: The instructions do not specify technical sanitization or validation logic for external Figma data before it is processed by the agent.
Audit Metadata