ClawHub
Back to skill

Security audit

figma-master

Security checks for vulnerabilities and agentic risk

Overview

The skill’s Figma design workflows and read-only checker fit its stated purpose, with ordinary installation precautions.

Limit Figma access and source scans to the project you intend to review. The bundled checker is read-only. If using the installation or optional build commands, select reviewed package versions and consider whether global installation is wanted. External package releases and the Figma connector itself are outside this artifact review.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • System Prompt LeakageDirect Leakage, Indirect Extraction, Tool-Based Exfiltration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (40)

Direct Prompt Extraction

High
Category
System Prompt Leakage
Confidence
85% confidence
Finding

Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.

Content

Scanner excerpt · scripts/lint_design_tokens.py (reported line 54)May include surrounding context.

python
re.compile(rules.get("variant_regex", ""))
    except re.error as exc:
        errors.append(f"variant_regex 非法: {exc}")
    return rules, errors


def _walk_tokens(node, path, errors, rules):

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · AGENTS.md (reported line 36)May include surrounding context.

md
| 环节 | 技能 | 文件 | 用途 |
|------|------|------|------|
| 组件 | figma-component-library | [skills/figma-component-library/SKILL.md](skills/figma-component-library/SKILL.md) | 从 Figma 设计稿生成前端组件代码库 |
| 规范 | design-system-rules | [skills/design-system-rules/SKILL.md](skills/design-system-rules/SKILL.md) | 创建和维护设计系统的规则与规范 |
| 原型 | wireframe-prototyping | [skills/wireframe-prototyping/SKILL.md](skills/wireframe-prototyping/SKILL.md) | 快速线框图与交互原型设计 |
| 审查 | ui-ux-designer | [skills/ui-ux-designer/SKILL.md](skills/ui-ux-designer/SKILL.md) | UI/UX 设计审查与改进建议 |

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · AGENTS.md (reported line 36)May include surrounding context.

md
| 环节 | 技能 | 文件 | 用途 |
|------|------|------|------|
| 组件 | figma-component-library | [skills/figma-component-library/SKILL.md](skills/figma-component-library/SKILL.md) | 从 Figma 设计稿生成前端组件代码库 |
| 规范 | design-system-rules | [skills/design-system-rules/SKILL.md](skills/design-system-rules/SKILL.md) | 创建和维护设计系统的规则与规范 |
| 原型 | wireframe-prototyping | [skills/wireframe-prototyping/SKILL.md](skills/wireframe-prototyping/SKILL.md) | 快速线框图与交互原型设计 |
| 审查 | ui-ux-designer | [skills/ui-ux-designer/SKILL.md](skills/ui-ux-designer/SKILL.md) | UI/UX 设计审查与改进建议 |

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · SKILL.md (reported line 38)May include surrounding context.

md
| 组件库落地：规划/变体命名/属性映射/去重 | [references/component-library-playbook.md](references/component-library-playbook.md) | 组件库 变体 1:1 映射 props Token 去重 |
| 设计评审检查清单（对比度/一致性/a11y） | [references/design-review-checklist.md](references/design-review-checklist.md) | 设计评审 Nielsen 对比度 一致性 无障碍 a11y 检查 |
| 设计系统规则与 Token 文档编写 | [skills/design-system-rules/SKILL.md](skills/design-system-rules/SKILL.md) | design system token 规范 样式指南 组件文档 |
| Figma 设计稿 → 前端组件代码库 | [skills/figma-component-library/SKILL.md](skills/figma-component-library/SKILL.md) | figma 组件库 设计到代码 React Vue storybook |
| UI/UX 设计审查与改进建议 | [skills/ui-ux-designer/SKILL.md](skills/ui-ux-designer/SKILL.md) | UI UX 审查 可用性 视觉一致性 无障碍 |
| 线框图与可点击原型设计 | [skills/wireframe-prototyping/SKILL.md](skills/wireframe-prototyping/SKILL.md) | 线框图 原型 信息架构 用户流程 测试 |

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · SKILL.md (reported line 38)May include surrounding context.

md
| 组件库落地：规划/变体命名/属性映射/去重 | [references/component-library-playbook.md](references/component-library-playbook.md) | 组件库 变体 1:1 映射 props Token 去重 |
| 设计评审检查清单（对比度/一致性/a11y） | [references/design-review-checklist.md](references/design-review-checklist.md) | 设计评审 Nielsen 对比度 一致性 无障碍 a11y 检查 |
| 设计系统规则与 Token 文档编写 | [skills/design-system-rules/SKILL.md](skills/design-system-rules/SKILL.md) | design system token 规范 样式指南 组件文档 |
| Figma 设计稿 → 前端组件代码库 | [skills/figma-component-library/SKILL.md](skills/figma-component-library/SKILL.md) | figma 组件库 设计到代码 React Vue storybook |
| UI/UX 设计审查与改进建议 | [skills/ui-ux-designer/SKILL.md](skills/ui-ux-designer/SKILL.md) | UI UX 审查 可用性 视觉一致性 无障碍 |
| 线框图与可点击原型设计 | [skills/wireframe-prototyping/SKILL.md](skills/wireframe-prototyping/SKILL.md) | 线框图 原型 信息架构 用户流程 测试 |

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · references/component-library-playbook.md (reported line 188)May include surrounding context.

md
## 相关子技能与层次边界

- 本手册是 **L2 决策层**（组件边界 / 变体命名 / 属性映射 / 去重验收），代码生成交给子技能：
  - [skills/figma-component-library/SKILL.md](../skills/figma-component-library/SKILL.md) — 从 Figma 设计稿生成 React/Vue 组件代码库（本手册是其"生成前规划"配套）
  - [skills/design-system-rules/SKILL.md](../skills/design-system-rules/SKILL.md) — 组件引用的 Token 命名规范由该子技能定义
- 兄弟参考：
  - [references/design-token-strategy.md](../references/design-token-strategy.md) — 本手册 §3 铁律"视觉值必须引用 Token"的命名 / 分层依据在此

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · references/component-library-playbook.md (reported line 188)May include surrounding context.

md
## 相关子技能与层次边界

- 本手册是 **L2 决策层**（组件边界 / 变体命名 / 属性映射 / 去重验收），代码生成交给子技能：
  - [skills/figma-component-library/SKILL.md](../skills/figma-component-library/SKILL.md) — 从 Figma 设计稿生成 React/Vue 组件代码库（本手册是其"生成前规划"配套）
  - [skills/design-system-rules/SKILL.md](../skills/design-system-rules/SKILL.md) — 组件引用的 Token 命名规范由该子技能定义
- 兄弟参考：
  - [references/design-token-strategy.md](../references/design-token-strategy.md) — 本手册 §3 铁律"视觉值必须引用 Token"的命名 / 分层依据在此

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · references/design-token-strategy.md (reported line 187)May include surrounding context.

md
- 本手册是 **L2 决策层**（Token 怎么分层 / 命名 / 迁移 / 主题化），把规范落成文档交给子技能：
  - [skills/design-system-rules/SKILL.md](../skills/design-system-rules/SKILL.md) — 将三层 Token 模型落成设计系统规范与 Token 文档
  - [skills/figma-component-library/SKILL.md](../skills/figma-component-library/SKILL.md) — 组件代码生成时所有视觉值必须引用本手册的 L2 语义 Token（见 §3 铁律）
- 兄弟参考：
  - [references/component-library-playbook.md](../references/component-library-playbook.md) — 组件边界与变体命名（与本手册"Token 化铁律"配合）
  - [references/design-review-checklist.md](../references/design-review-checklist.md) — 一致性扫描命令可机械核查本手册要消灭的硬编码色值

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · references/design-token-strategy.md (reported line 187)May include surrounding context.

md
- 本手册是 **L2 决策层**（Token 怎么分层 / 命名 / 迁移 / 主题化），把规范落成文档交给子技能：
  - [skills/design-system-rules/SKILL.md](../skills/design-system-rules/SKILL.md) — 将三层 Token 模型落成设计系统规范与 Token 文档
  - [skills/figma-component-library/SKILL.md](../skills/figma-component-library/SKILL.md) — 组件代码生成时所有视觉值必须引用本手册的 L2 语义 Token（见 §3 铁律）
- 兄弟参考：
  - [references/component-library-playbook.md](../references/component-library-playbook.md) — 组件边界与变体命名（与本手册"Token 化铁律"配合）
  - [references/design-review-checklist.md](../references/design-review-checklist.md) — 一致性扫描命令可机械核查本手册要消灭的硬编码色值

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · skills/figma-component-library/SKILL.md (reported line 7)May include surrounding context.

md
source:
  type: derived
  repo: skills-repo/figma-master
  path: skills/figma-component-library/SKILL.md
  url: https://skills.sh/figma/mcp-server-guide/figma-generate-library
  version: 1.0.0
  updated: 2026-07-31

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · AGENTS.md (reported line 37)May include surrounding context.

md
| 环节 | 技能 | 文件 | 用途 |
|------|------|------|------|
| 组件 | figma-component-library | [skills/figma-component-library/SKILL.md](skills/figma-component-library/SKILL.md) | 从 Figma 设计稿生成前端组件代码库 |
| 规范 | design-system-rules | [skills/design-system-rules/SKILL.md](skills/design-system-rules/SKILL.md) | 创建和维护设计系统的规则与规范 |
| 原型 | wireframe-prototyping | [skills/wireframe-prototyping/SKILL.md](skills/wireframe-prototyping/SKILL.md) | 快速线框图与交互原型设计 |
| 审查 | ui-ux-designer | [skills/ui-ux-designer/SKILL.md](skills/ui-ux-designer/SKILL.md) | UI/UX 设计审查与改进建议 |

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · AGENTS.md (reported line 37)May include surrounding context.

md
| 环节 | 技能 | 文件 | 用途 |
|------|------|------|------|
| 组件 | figma-component-library | [skills/figma-component-library/SKILL.md](skills/figma-component-library/SKILL.md) | 从 Figma 设计稿生成前端组件代码库 |
| 规范 | design-system-rules | [skills/design-system-rules/SKILL.md](skills/design-system-rules/SKILL.md) | 创建和维护设计系统的规则与规范 |
| 原型 | wireframe-prototyping | [skills/wireframe-prototyping/SKILL.md](skills/wireframe-prototyping/SKILL.md) | 快速线框图与交互原型设计 |
| 审查 | ui-ux-designer | [skills/ui-ux-designer/SKILL.md](skills/ui-ux-designer/SKILL.md) | UI/UX 设计审查与改进建议 |

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · SKILL.md (reported line 37)May include surrounding context.

md
| Design Token 三层策略、命名分类、暗色主题 | [references/design-token-strategy.md](references/design-token-strategy.md) | design token 命名 分层 primitive semantic 暗色 分类 |
| 组件库落地：规划/变体命名/属性映射/去重 | [references/component-library-playbook.md](references/component-library-playbook.md) | 组件库 变体 1:1 映射 props Token 去重 |
| 设计评审检查清单（对比度/一致性/a11y） | [references/design-review-checklist.md](references/design-review-checklist.md) | 设计评审 Nielsen 对比度 一致性 无障碍 a11y 检查 |
| 设计系统规则与 Token 文档编写 | [skills/design-system-rules/SKILL.md](skills/design-system-rules/SKILL.md) | design system token 规范 样式指南 组件文档 |
| Figma 设计稿 → 前端组件代码库 | [skills/figma-component-library/SKILL.md](skills/figma-component-library/SKILL.md) | figma 组件库 设计到代码 React Vue storybook |
| UI/UX 设计审查与改进建议 | [skills/ui-ux-designer/SKILL.md](skills/ui-ux-designer/SKILL.md) | UI UX 审查 可用性 视觉一致性 无障碍 |
| 线框图与可点击原型设计 | [skills/wireframe-prototyping/SKILL.md](skills/wireframe-prototyping/SKILL.md) | 线框图 原型 信息架构 用户流程 测试 |

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · SKILL.md (reported line 37)May include surrounding context.

md
| Design Token 三层策略、命名分类、暗色主题 | [references/design-token-strategy.md](references/design-token-strategy.md) | design token 命名 分层 primitive semantic 暗色 分类 |
| 组件库落地：规划/变体命名/属性映射/去重 | [references/component-library-playbook.md](references/component-library-playbook.md) | 组件库 变体 1:1 映射 props Token 去重 |
| 设计评审检查清单（对比度/一致性/a11y） | [references/design-review-checklist.md](references/design-review-checklist.md) | 设计评审 Nielsen 对比度 一致性 无障碍 a11y 检查 |
| 设计系统规则与 Token 文档编写 | [skills/design-system-rules/SKILL.md](skills/design-system-rules/SKILL.md) | design system token 规范 样式指南 组件文档 |
| Figma 设计稿 → 前端组件代码库 | [skills/figma-component-library/SKILL.md](skills/figma-component-library/SKILL.md) | figma 组件库 设计到代码 React Vue storybook |
| UI/UX 设计审查与改进建议 | [skills/ui-ux-designer/SKILL.md](skills/ui-ux-designer/SKILL.md) | UI UX 审查 可用性 视觉一致性 无障碍 |
| 线框图与可点击原型设计 | [skills/wireframe-prototyping/SKILL.md](skills/wireframe-prototyping/SKILL.md) | 线框图 原型 信息架构 用户流程 测试 |

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · references/component-library-playbook.md (reported line 189)May include surrounding context.

md
- 本手册是 **L2 决策层**（组件边界 / 变体命名 / 属性映射 / 去重验收），代码生成交给子技能：
  - [skills/figma-component-library/SKILL.md](../skills/figma-component-library/SKILL.md) — 从 Figma 设计稿生成 React/Vue 组件代码库（本手册是其"生成前规划"配套）
  - [skills/design-system-rules/SKILL.md](../skills/design-system-rules/SKILL.md) — 组件引用的 Token 命名规范由该子技能定义
- 兄弟参考：
  - [references/design-token-strategy.md](../references/design-token-strategy.md) — 本手册 §3 铁律"视觉值必须引用 Token"的命名 / 分层依据在此
  - [references/design-review-checklist.md](../references/design-review-checklist.md) — 生成后一致性扫描命令（见 §6 验收步骤）

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · references/component-library-playbook.md (reported line 189)May include surrounding context.

md
- 本手册是 **L2 决策层**（组件边界 / 变体命名 / 属性映射 / 去重验收），代码生成交给子技能：
  - [skills/figma-component-library/SKILL.md](../skills/figma-component-library/SKILL.md) — 从 Figma 设计稿生成 React/Vue 组件代码库（本手册是其"生成前规划"配套）
  - [skills/design-system-rules/SKILL.md](../skills/design-system-rules/SKILL.md) — 组件引用的 Token 命名规范由该子技能定义
- 兄弟参考：
  - [references/design-token-strategy.md](../references/design-token-strategy.md) — 本手册 §3 铁律"视觉值必须引用 Token"的命名 / 分层依据在此
  - [references/design-review-checklist.md](../references/design-review-checklist.md) — 生成后一致性扫描命令（见 §6 验收步骤）

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · references/design-review-checklist.md (reported line 188)May include surrounding context.

md
- 本手册是 **L2 量化层**（可勾选 / 可量化 / 可复现的评审清单 + 对比度公式 + 扫描命令），启发式评估与改进建议交给子技能：
  - [skills/ui-ux-designer/SKILL.md](../skills/ui-ux-designer/SKILL.md) — 基于 Nielsen 十大原则的 UI/UX 设计审查与改进（本手册是其"可量化评审"配套）
  - [skills/design-system-rules/SKILL.md](../skills/design-system-rules/SKILL.md) — 一致性问题归根是 Token 规范缺失，由该子技能定义规范
- 兄弟参考：
  - [references/design-token-strategy.md](../references/design-token-strategy.md) — §3 一致性扫描命中的硬编码色值，根治方案是三层 Token 化
  - [references/component-library-playbook.md](../references/component-library-playbook.md) — 组件级一致性 / 焦点样式验收与本手册 §12 清单呼应

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · references/design-review-checklist.md (reported line 188)May include surrounding context.

md
- 本手册是 **L2 量化层**（可勾选 / 可量化 / 可复现的评审清单 + 对比度公式 + 扫描命令），启发式评估与改进建议交给子技能：
  - [skills/ui-ux-designer/SKILL.md](../skills/ui-ux-designer/SKILL.md) — 基于 Nielsen 十大原则的 UI/UX 设计审查与改进（本手册是其"可量化评审"配套）
  - [skills/design-system-rules/SKILL.md](../skills/design-system-rules/SKILL.md) — 一致性问题归根是 Token 规范缺失，由该子技能定义规范
- 兄弟参考：
  - [references/design-token-strategy.md](../references/design-token-strategy.md) — §3 一致性扫描命中的硬编码色值，根治方案是三层 Token 化
  - [references/component-library-playbook.md](../references/component-library-playbook.md) — 组件级一致性 / 焦点样式验收与本手册 §12 清单呼应

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · references/design-token-strategy.md (reported line 186)May include surrounding context.

md
## 相关子技能与层次边界

- 本手册是 **L2 决策层**（Token 怎么分层 / 命名 / 迁移 / 主题化），把规范落成文档交给子技能：
  - [skills/design-system-rules/SKILL.md](../skills/design-system-rules/SKILL.md) — 将三层 Token 模型落成设计系统规范与 Token 文档
  - [skills/figma-component-library/SKILL.md](../skills/figma-component-library/SKILL.md) — 组件代码生成时所有视觉值必须引用本手册的 L2 语义 Token（见 §3 铁律）
- 兄弟参考：
  - [references/component-library-playbook.md](../references/component-library-playbook.md) — 组件边界与变体命名（与本手册"Token 化铁律"配合）

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · references/design-token-strategy.md (reported line 186)May include surrounding context.

md
## 相关子技能与层次边界

- 本手册是 **L2 决策层**（Token 怎么分层 / 命名 / 迁移 / 主题化），把规范落成文档交给子技能：
  - [skills/design-system-rules/SKILL.md](../skills/design-system-rules/SKILL.md) — 将三层 Token 模型落成设计系统规范与 Token 文档
  - [skills/figma-component-library/SKILL.md](../skills/figma-component-library/SKILL.md) — 组件代码生成时所有视觉值必须引用本手册的 L2 语义 Token（见 §3 铁律）
- 兄弟参考：
  - [references/component-library-playbook.md](../references/component-library-playbook.md) — 组件边界与变体命名（与本手册"Token 化铁律"配合）

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · skills/design-system-rules/SKILL.md (reported line 7)May include surrounding context.

md
source:
  type: derived
  repo: skills-repo/figma-master
  path: skills/design-system-rules/SKILL.md
  url: https://skills.sh/figma/mcp-server-guide/figma-create-design-system-rules
  version: 1.0.0
  updated: 2026-07-31

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · AGENTS.md (reported line 38)May include surrounding context.

md
|------|------|------|------|
| 组件 | figma-component-library | [skills/figma-component-library/SKILL.md](skills/figma-component-library/SKILL.md) | 从 Figma 设计稿生成前端组件代码库 |
| 规范 | design-system-rules | [skills/design-system-rules/SKILL.md](skills/design-system-rules/SKILL.md) | 创建和维护设计系统的规则与规范 |
| 原型 | wireframe-prototyping | [skills/wireframe-prototyping/SKILL.md](skills/wireframe-prototyping/SKILL.md) | 快速线框图与交互原型设计 |
| 审查 | ui-ux-designer | [skills/ui-ux-designer/SKILL.md](skills/ui-ux-designer/SKILL.md) | UI/UX 设计审查与改进建议 |

## 使用场景

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · AGENTS.md (reported line 38)May include surrounding context.

md
|------|------|------|------|
| 组件 | figma-component-library | [skills/figma-component-library/SKILL.md](skills/figma-component-library/SKILL.md) | 从 Figma 设计稿生成前端组件代码库 |
| 规范 | design-system-rules | [skills/design-system-rules/SKILL.md](skills/design-system-rules/SKILL.md) | 创建和维护设计系统的规则与规范 |
| 原型 | wireframe-prototyping | [skills/wireframe-prototyping/SKILL.md](skills/wireframe-prototyping/SKILL.md) | 快速线框图与交互原型设计 |
| 审查 | ui-ux-designer | [skills/ui-ux-designer/SKILL.md](skills/ui-ux-designer/SKILL.md) | UI/UX 设计审查与改进建议 |

## 使用场景

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · SKILL.md (reported line 40)May include surrounding context.

md
| 设计系统规则与 Token 文档编写 | [skills/design-system-rules/SKILL.md](skills/design-system-rules/SKILL.md) | design system token 规范 样式指南 组件文档 |
| Figma 设计稿 → 前端组件代码库 | [skills/figma-component-library/SKILL.md](skills/figma-component-library/SKILL.md) | figma 组件库 设计到代码 React Vue storybook |
| UI/UX 设计审查与改进建议 | [skills/ui-ux-designer/SKILL.md](skills/ui-ux-designer/SKILL.md) | UI UX 审查 可用性 视觉一致性 无障碍 |
| 线框图与可点击原型设计 | [skills/wireframe-prototyping/SKILL.md](skills/wireframe-prototyping/SKILL.md) | 线框图 原型 信息架构 用户流程 测试 |

## 内置脚本（确定性、可重复执行）

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · SKILL.md (reported line 40)May include surrounding context.

md
| 设计系统规则与 Token 文档编写 | [skills/design-system-rules/SKILL.md](skills/design-system-rules/SKILL.md) | design system token 规范 样式指南 组件文档 |
| Figma 设计稿 → 前端组件代码库 | [skills/figma-component-library/SKILL.md](skills/figma-component-library/SKILL.md) | figma 组件库 设计到代码 React Vue storybook |
| UI/UX 设计审查与改进建议 | [skills/ui-ux-designer/SKILL.md](skills/ui-ux-designer/SKILL.md) | UI UX 审查 可用性 视觉一致性 无障碍 |
| 线框图与可点击原型设计 | [skills/wireframe-prototyping/SKILL.md](skills/wireframe-prototyping/SKILL.md) | 线框图 原型 信息架构 用户流程 测试 |

## 内置脚本（确定性、可重复执行）