figma-click-flow

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses figma.createNodeFromSvg to emulate connectors because the native figma.createConnector is unavailable in standard Figma Design files. This is a documented limitation and the workaround is standard practice.
  • [SAFE]: The script uses figma.getNodeByIdAsync and figma.loadAllPagesAsync to ensure reliable access to nodes in large or complex Figma files, which follows best practices for Figma plugin development.
  • [SAFE]: The skill includes a clear visual canon (e.g., specific stroke weights and colors) and an idempotent cleanup mechanism that removes previous overlays before redrawing, preventing document clutter.
  • [SAFE]: Input handling is well-defined, allowing for prototype-driven, manual, or layout-based connection discovery without requiring external or sensitive data access.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 09:40 PM
Security Audit — agent-trust-hub — figma-click-flow