figma-use

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill contains comprehensive documentation and technical references for the Figma Plugin API, adhering to best practices for secure tool usage.
  • [SAFE]: Extensive safety guidelines are provided, including mandatory validation steps (Rule 15), error recovery procedures (Section 7), and instructions for incremental task execution (Section 6) to maintain predictable behavior.
  • [SAFE]: The skill correctly identifies and warns against common API pitfalls, such as improper font loading and sizing enums, which could otherwise lead to unstable execution states.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes operations that ingest data from the Figma canvas (e.g., node names and text content) to drive subsequent logic. This inherent capability is managed through strict documentation of boundary markers, including instructions to validate structure with get_metadata and visual output with screenshot() after each logical step.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:08 PM
Security Audit — agent-trust-hub — figma-use