figma-generate-component-doc
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local Node.js script (scripts/generate-doc.mjs) to process JSON into Markdown. This execution is performed on locally provided scripts with static paths, which is an expected and safe practice for this workflow.- [DATA_EXFILTRATION]: No unauthorized data access or network transmission was detected. The script reads Figma data and outputs Markdown locally.- [PROMPT_INJECTION]: The workflow uses deterministic scripts rather than direct LLM assembly, effectively mitigating potential prompt injection risks from the source design data.
Audit Metadata