figma-use
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFE
Full Analysis
- Design System Integration: The skill provides detailed patterns for working with Figma's design system features, including variables, components, and styles. These patterns align with official Figma documentation and focus on legitimate automation tasks within the Figma environment.
- Operational Safety: A strong emphasis is placed on atomic execution and incremental progress. These rules are designed to prevent state corruption in Figma files and ensure the agent can recover from errors gracefully, which is a positive safety and reliability practice.
- Technical Snippets: The provided JavaScript examples are transparent and use the standard Figma Plugin API surface. While one utility snippet uses multi-layer Base64 encoding (
btoa) for generating unique object keys during metadata traversal, this is used as a local data management technique for key generation and does not represent an attempt to hide malicious logic or commands. - Resource Management: External resource references, such as the Figma MCP server endpoint, target official and expected domains. The skill does not request access to sensitive local system files or unauthorized network locations, maintaining a narrow and appropriate scope of operation.
Audit Metadata