Back to skill
Skillv1.0.2

VirusTotal security

figma-design-analyzer · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 14, 2026, 8:06 AM
Hash
e6100ad91468c37873ec31448ddf3dd4a95228eb68078974321840cdaf49b457
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: figma-design-analyzer Version: 1.0.2 The bundle is a legitimate utility for analyzing Figma design files, extracting design tokens (colors, fonts, spacing), and comparing them against CSS implementations. It uses the official Figma REST API (api.figma.com) and requires a user-provided FIGMA_ACCESS_TOKEN. The code logic in scripts/modules/ is consistent with the stated purpose, and there is no evidence of data exfiltration to third-party domains, obfuscation, or malicious command execution. While there are minor security risks typical of CLI tools (such as potential path traversal if a user provides a malicious output path in figma-cli.js or XSS in the generated HTML report in design-comparator.js), these appear to be unintentional vulnerabilities rather than intentional malice.
External report
View on VirusTotal