component-properties-figma
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns detected. The skill is designed to interact with the Figma Plugin API via a trusted tool (
use_figma). - [COMMAND_EXECUTION]: The skill uses JavaScript scripts intended for execution within the Figma sandbox. These scripts use standard API methods such as
figma.getNodeByIdAsync,addComponentProperty, andcreateInstanceto perform design tasks. - [DATA_EXFILTRATION]: No network operations or external data transmissions were found. The scripts operate exclusively on the Figma document model.
- [PROMPT_INJECTION]: The instructions are clear and focused on task execution without attempting to override system behavior or bypass safety guardrails.
- [EXTERNAL_DOWNLOADS]: The skill references the official
figma-useskill as a dependency for its execution model, which is a standard practice for Figma-integrated AI tools.
Audit Metadata