Install
$ agentstack add skill-sergekostenchuk-ui-ux-agent-skill-system-figma-code-to-canvas ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Figma Code To Canvas
Use this skill for the reverse direction: code or browser UI into Figma canvas. This is tool-availability-sensitive and privacy-sensitive.
Modes
capture-local: convert a local dev server page into Figma layers.capture-public: convert a public URL into Figma layers.capture-private: plan a safe path for authenticated/staging pages.reconcile: compare generated Figma layers with the source UI and list drift.fallback: produce manual rebuild instructions when code-to-canvas tools are unavailable.
Workflow
- Confirm URL/app source, viewport, target Figma file/page, and privacy class.
- For local pages, start or verify the dev server and capture a screenshot before Figma generation.
- If code-to-canvas or generated design is requested, invoke the installed
figma:figma-generate-designskill when present. - Do not send private authenticated pages, cookies, customer data, or internal URLs through remote services without explicit approval.
- After generation, read back Figma metadata or capture a Figma screenshot when possible.
- Produce a reconciliation report: source URL, viewport, generated target, visible mismatches, and follow-up edits.
Output Shape
Use [assets/code-to-canvas-report.md](assets/code-to-canvas-report.md).
Fallbacks
- If Figma MCP is unavailable: provide a manual frame/component rebuild plan.
- If the page cannot be reached: request a screenshot/export and route to
figma-canvas-editor. - If privacy blocks remote generation: keep the work local and describe a human-assisted import route.
Resources
- Read
$CODEX_SKILLS_DIR/senior-figma-orchestrator/references/figma-mcp-compatibility.mdbefore promising capability.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: sergekostenchuk
- Source: sergekostenchuk/ui-ux-agent-skill-system
- License: Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.