Figma Workflow Auditor
Audit Figma MCP, design-to-code, code-to-canvas, canvas-editing, and design-system workflows for correctness, freshness, privacy, evidence, and routing quality. Use this skill when the user asks whether a Figma workflow, skill, task plan, MCP capability claim, or agent handoff is valid, current, safe, or production-ready.
Install
$ agentstack add skill-sergekostenchuk-ui-ux-agent-skill-system-figma-workflow-auditor ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Links to your public security report.[](https://agentstack.voostack.com/security/report/skill-sergekostenchuk-ui-ux-agent-skill-system-figma-workflow-auditor) Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Figma Workflow Auditor
Use this skill as the quality gate for Figma-related workflows. It does not mutate Figma files.
Modes
capability-audit: verify claims against current Figma MCP/tool availability.privacy-audit: check whether data transfer and permissions are acceptable.evidence-audit: check whether claimed reads/writes/exports actually ran.routing-audit: check whether the right Figma specialist was selected.skill-audit: review a Figma skill draft or existing skill.
Workflow
- Identify the workflow under review: prompt, plan, skill, transcript, report, or file change.
- Check official/current sources when capability details may have changed.
- Verify tool evidence: tool response, metadata readback, screenshot/export, local diff, or report artifact.
- Flag overclaims separately from implementation bugs.
- Return findings ordered by severity, with concrete fixes.
Findings Format
Use [assets/audit-report-template.md](assets/audit-report-template.md).
Audit Rules
- A Figma MCP claim is weak if it lacks session tool availability and evidence.
- A mutation claim is invalid without a target, scope, executed tool, and readback.
- A privacy plan is weak if it omits what data is sent to Figma or another service.
- A design-to-code plan is weak if it skips local component inspection and visual verification.
- An effects plan is weak if it treats
NOISE,TEXTURE,GLASS, or progressive blur as universally available without runtime checks.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: sergekostenchuk
- Source: sergekostenchuk/ui-ux-agent-skill-system
- License: Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.