figma-use
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains comprehensive documentation and technical references for the Figma Plugin API, adhering to best practices for secure tool usage.
- [SAFE]: Extensive safety guidelines are provided, including mandatory validation steps (Rule 15), error recovery procedures (Section 7), and instructions for incremental task execution (Section 6) to maintain predictable behavior.
- [SAFE]: The skill correctly identifies and warns against common API pitfalls, such as improper font loading and sizing enums, which could otherwise lead to unstable execution states.
- [INDIRECT_PROMPT_INJECTION]: The skill describes operations that ingest data from the Figma canvas (e.g., node names and text content) to drive subsequent logic. This inherent capability is managed through strict documentation of boundary markers, including instructions to validate structure with
get_metadataand visual output withscreenshot()after each logical step.
Audit Metadata