implement-design
v1.0.0Translates Figma designs into production-ready code with 1:1 visual fidelity. Use when implementing UI from Figma files, when user mentions "implement design...
⭐ 0· 157·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill is explicitly about translating Figma designs and repeatedly references Figma MCP tools (get_design_context, get_screenshot, get_metadata). That aligns with the stated purpose. Minor inconsistency: the SKILL.md says the Figma MCP server is "included with the plugin" and suggests guiding the user to enable it, yet the registry shows no install or plugin files. This is ambiguous (documentation mismatch) but not necessarily malicious.
Instruction Scope
The instructions stay focused on fetching design data and assets from the Figma MCP server and translating them into project code. They do not instruct reading unrelated system files or requesting other credentials. Two items worth flagging: (1) the guidance to use any 'localhost' asset source directly — this requires the agent to access local endpoints and could surface sensitive local resources if misconfigured; (2) the SKILL.md assumes MCP tooling is present (e.g., get_design_context) but gives no fallback or verification beyond 'check if tools are available.' Both are scope/operational ambiguities to confirm.
Install Mechanism
No install specification and no code files—this is instruction-only, which is low-risk because nothing is written to disk or fetched during an install step.
Credentials
The skill requests no environment variables or credentials in the registry, which is proportionate for an instruction-only integration that expects a platform-provided MCP connection. However, the SKILL.md assumes access to a Figma MCP server; if your environment requires credentials or a separate connector for that MCP server, those requirements are not declared here and should be clarified before use.
Persistence & Privilege
always is false and the skill does not request any elevated persistence or system-wide configuration changes. Autonomous invocation is allowed (platform default) but not otherwise privileged by this skill.
Assessment
This skill looks coherent for implementing Figma designs, but verify a few operational details before installing: 1) Confirm how your environment provides the "Figma MCP server" the skill expects — does it require credentials, a separate plugin, or special configuration? Those credentials (if any) are not declared in the skill metadata. 2) Ask what 'localhost' asset URLs will point to in your environment; allowing the agent to fetch localhost-hosted assets can expose internal services or files if misconfigured. 3) Because the SKILL.md refers to an included MCP plugin but no install files exist, confirm whether there is an external plugin you must enable and whether that plugin is trusted. 4) If you plan to let agents run this autonomously, audit the MCP endpoint and asset-serving behavior (CORS, auth, access logs) to ensure only intended resources are available. If any of these answers are unclear or require additional credentials, treat the ambiguity as a reason to delay granting access until clarified.Like a lobster shell, security has layers — review code before you run it.
latestvk97d7j15mrtgnj4nmdn2q5sfnx8346f3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.