Security audit
Security checks across malware telemetry and agentic risk
This skill is a Figma-to-mobile-code helper whose network use, local project scanning, and feedback logging are mostly disclosed and tied to its purpose, but users should approve scans and logs deliberately.
Install only if you are comfortable giving the skill a Figma token through the environment and letting it read the selected mobile project when you approve a scan. Do not paste the token into chat, review any requested scan path before approving, and avoid logging feedback snippets that contain sensitive product details unless you are comfortable storing them locally.
def export_svgs(file_key: str, node_ids: list, token: str) -> dict:
"""Export nodes as SVG via Figma API. Returns {node_id: svg_string}."""
ids_param = ",".join(node_ids)
url = f"https://api.figma.com/v1/images/{file_key}?ids={ids_param}&format=svg"
headers = {"X-Figma-Token": token}
_rate_limit()
resp = requests.get(url, headers=headers, timeout=30)65/65 vendors flagged this skill as clean.
No suspicious patterns detected.