figma-cli
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions include installing a command-line tool,
figma-cli, from the author's GitHub repository (github.com/wohsj110/figma_cli). This represents a standard installation process for the tool's intended functionality. - [COMMAND_EXECUTION]: The skill utilizes shell commands to verify tool presence, perform installation, and set up credentials through
figma-cli init. It also executes subcommands for retrieving Figma data and exporting assets. - [PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by retrieving and processing external data from the Figma API, including design comments and file metadata. Ingestion points: Data retrieved via
figma-cli file get,figma-cli node inspect, andfigma-cli comments list. Boundary markers: Absent from the instructions. Capability inventory: Execution of thefigma-clicommand-line tool. Sanitization: The instructions do not specify any sanitization or validation of the content received from Figma.
Audit Metadata