Security audit

figma-optimizer

Security checks for vulnerabilities and agentic risk

Overview

This is a transparent Chinese-language Figma-to-code guidance skill with no bundled executable code, persistence, or hidden data handling.

Install this if you are comfortable with Chinese-language instructions and want an agent to use your selected Figma context for code generation. Keep Figma MCP access limited to the intended design file or frame and review generated code before merging it.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (4)

Natural-Language Policy Violations

Medium

Confidence: 94% confidence
Finding: This file uses Chinese throughout its title, description, and instructions, which effectively forces a specific language for users and agents consuming the skill. Under the policy, language constraints should be optional or explicitly justified; no such opt-in or justification appears here.

Natural-Language Policy Violations

Medium

Confidence: 90% confidence
Finding: This plain-text file contains user-facing natural-language prompts exclusively in Chinese, and there is no indication that the skill is region-specific or that users can opt into another language. Under the policy, forcing a specific language without user choice is a natural-language policy concern.

Natural-Language Policy Violations

Low

Confidence: 90% confidence
Finding: The document content is written entirely in Chinese, including headings, field descriptions, and component explanations, with no indication that users may choose another language or that the file is intended only for a Chinese-language audience. Under the policy, a fixed language/locale without opt-in or justification is a natural-language policy concern.

Natural-Language Policy Violations

Low

Confidence: 91% confidence
Finding: This plain-text file presents its instructions and descriptions entirely in Chinese, beginning with the title and introductory description. Under the stated policy, a skill artifact that imposes a specific language without user opt-in can be a locale/language policy violation.

Static analysis

No suspicious patterns detected.