Figma Developer
Automates the conversion of Figma designs into React components, syncing design tokens and streamlining the design-to-code workflow.
Install this skill
Security score
The Figma Developer skill was audited on Feb 9, 2026 and we found 28 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 90 | console.log(` ${tokens.colors.length} colors`) |
Template literal with variable interpolation in command context
| 91 | console.log(` ${tokens.typography.length} text styles`) |
Template literal with variable interpolation in command context
| 92 | console.log(` ${tokens.spacing.length} spacing values`) |
Template literal with variable interpolation in command context
| 181 | console.log(`Found ${iconsFrame.children.length} icons`) |
Template literal with variable interpolation in command context
| 193 | await fs.writeFile(`public/icons/${svg.name}.svg`, content) |
Template literal with variable interpolation in command context
| 194 | console.log(` ✓ ${svg.name}.svg`) |
Template literal with variable interpolation in command context
| 246 | const component = ` |
Template literal with variable interpolation in command context
| 256 | await fs.writeFile(`components/icons/${componentName}Icon.tsx`, component) |
Template literal with variable interpolation in command context
| 257 | console.log(` ✓ ${componentName}Icon.tsx`) |
Template literal with variable interpolation in command context
| 264 | return `export { ${componentName}Icon } from './${componentName}Icon'` |
Template literal with variable interpolation in command context
| 330 | console.log(` ${component.name}`) |
Template literal with variable interpolation in command context
| 331 | console.log(` Key: ${component.key}`) |
Template literal with variable interpolation in command context
| 332 | console.log(` Description: ${component.description}`) |
Template literal with variable interpolation in command context
| 340 | console.log(` Set: ${setId}`) |
Template literal with variable interpolation in command context
| 342 | console.log(` - ${variant.name}`) |
Template literal with variable interpolation in command context
| 384 | const component = ` |
Template literal with variable interpolation in command context
| 475 | return `#${r}${g}${b}` |
Template literal with variable interpolation in command context
| 487 | ```yaml |
Template literal with variable interpolation in command context
| 616 | console.log(`Version: ${previousVersion} → ${currentVersion}`) |
Template literal with variable interpolation in command context
| 641 | const types = ` |
Template literal with variable interpolation in command context
| 643 | ${tokens.colors.map(c => `| '${c.name}'`).join('\n ')} |
Template literal with variable interpolation in command context
| 672 | throw new Error(`Component not found: ${componentName}`) |
Template literal with variable interpolation in command context
| 679 | await fs.writeFile(`components/${componentName}.tsx`, code) |
Template literal with variable interpolation in command context
| 681 | console.log(`Synced: ${componentName}`) |
Template literal with variable interpolation in command context
| 715 | return `#${r.toString(16).padStart(2, '0')}${g.toString(16).padStart(2, '0')}${b.toString(16).padStart(2, '0')}` |
Access to .env file
| 33 | # .env |
Access to .env file
| 49 | accessToken: process.env.FIGMA_ACCESS_TOKEN |
External URL reference
| 24 | 1. Go to [Figma Settings](https://www.figma.com/settings) |