token-tailwind-theme-sync
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to transform Figma design variables into local code artifacts (CSS and Tailwind configurations). All operations are described as local transformations based on user-provided or visible Figma context.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests untrusted data from Figma variable collections.
- Ingestion points: Figma variable collections (color, spacing, radius, typography) defined in the design file.
- Boundary markers: None explicitly defined in the instructions to separate data from instructions.
- Capability inventory: The skill is permitted to make scoped, reversible edits to project files (CSS variables and tailwind.config).
- Sanitization: The skill instructions enforce strict output formats, such as expressing colors as HSL triplets and mapping spacing/radius to existing scales, which provides a natural validation layer against arbitrary instruction execution.
Audit Metadata