Security checks across malware telemetry and agentic risk
This is a coherent UI prototype generator with local HTML output by default and a disclosed optional Figma workflow that needs careful token and data handling.
Install is reasonable for local HTML prototype generation. Only configure a Figma token when you need Figma output, keep that token out of Git and shared logs, and do not send confidential screenshots or internal designs to Figma unless your project policy allows it.
4. **调用 Figma API**：
```python
headers = {"X-Figma-Token": auth['access_token']}
response = requests.post(
"https://api.figma.com/v1/files",
json={"name": "Prototype", "nodes": nodes},
headers=headers4. **调用 Figma API**：
```python
headers = {"X-Figma-Token": auth['access_token']}
response = requests.post(
"https://api.figma.com/v1/files",
json={"name": "Prototype", "nodes": nodes},
headers=headers```python
headers = {"X-Figma-Token": auth['access_token']}
response = requests.post(
"https://api.figma.com/v1/files",
json={"name": "Prototype", "nodes": nodes},
headers=headers
)65/65 vendors flagged this skill as clean.