generate-component-doc-figma
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Node.js script (scripts/generate-doc.mjs) to transform JSON data from Figma into Markdown documentation. This is a legitimate use of local command execution for data processing tasks.- [SAFE]: The skill processes component data from external Figma files, which is an intended functionality.- Ingestion points: Figma node names, descriptions, and properties collected in scripts/collect-component-data.js.- Boundary markers: The generated documentation does not include explicit boundary markers or warnings against embedded instructions in the output Markdown.- Capability inventory: The skill uses the use_figma tool and executes local shell commands (node scripts/generate-doc.mjs) but does not have network-write capabilities or access to sensitive credentials.- Sanitization: The generation script (generate-doc.mjs) uses regex-based parsing to extract specific sections from the description but does not implement instruction filtering.
Audit Metadata