figma-to-generateblocks
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The instructions in
SKILL.mddirect the agent to execute a local Python script namedpreflight.pyfor validating generated output files. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external design data, which could be used to deliver malicious instructions to the agent.
- Ingestion points: Figma design files, exported CSS, and screenshots processed during the conversion workflow (
SKILL.md,CLAUDE.md). - Boundary markers: No specific delimiters or instructions to ignore embedded commands are present to protect the ingestion process.
- Capability inventory: The agent has the capability to write blocks to files and execute shell commands (
preflight.py). - Sanitization: The instructions do not define any sanitization or filtering logic for the data extracted from Figma sources before it is processed or used in file operations.
Audit Metadata