responsive-breakpoint-check
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted content from Figma design files and possesses the ability to modify those files, which could be exploited if a design element contains malicious instructions.
- Ingestion points: The skill reads content from frames, components, instances, variables, styles, layers, prototype settings, comments, sections, and annotations as specified in
SKILL.md. - Boundary markers: None identified. There are no explicit instructions for the agent to ignore or delimit instructions that might be embedded within the text layers or comments of the design file.
- Capability inventory: The skill is authorized to make "scoped, reversible edits" and "bulk changes" to the Figma design file (
SKILL.md). - Sanitization: No sanitization, escaping, or validation of external design content is mentioned before the data is interpolated into the agent's context.
Audit Metadata