figma-deep-component
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Design Data Extraction: The script
scripts/deep-component.jsuses standard Figma Plugin API methods (figma.getNodeByIdAsync,figma.variables.getLocalVariablesAsync) to traverse the document tree and collect property data. This is consistent with the skill's stated purpose of providing design context for code generation. - [SAFE]: No Unauthorized Operations: The code does not perform any network requests, file system access, or credential harvesting. All data processing is local to the Figma document context provided by the platform.
- [SAFE]: Code Transparency: The implementation is clear and lacks any obfuscation, hidden instructions, or suspicious conditional triggers. The recursive logic for traversing component trees is standard for design-to-code tools.
Audit Metadata