token-sync — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited token-sync (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Sync DTCG (W3C Design Token Community Group) design tokens to Figma. Creates/updates Variables for atomic tokens (color, spacing, radius) and Styles for composite types (typography, shadow). Idempotent — safe to run multiple times.
reverse_sync_tokens directly after load_toolset("tokens").ping → verify plugin connectionIf `ping` fails (plugin not connected): STOP. Do not fall back to other MCP servers. Tell user: open Figma → Plugins → FigCraft → wait for connection, then retry.
Ask the user for the DTCG JSON file path.
load_toolset("tokens") → enable DTCG token toolslist_tokens(filePath: "...") → parse and preview what will be syncedShow the user a summary: total tokens, types breakdown (color, spacing, typography, shadow, etc.).
diff_tokens(filePath: "...", collectionName: "...") → compare against existing Figma variablesReport what will happen:
sync_tokens(filePath: "...", collectionName: "...", modeName: "...")Parameters:
filePath — path to DTCG JSONcollectionName — target Figma collection (default: "Design Tokens")modeName — target mode (default: first mode)For multi-mode sync (e.g., Light/Dark):
sync_tokens_multi_mode(modes: {
"Light": "tokens/light.json",
"Dark": "tokens/dark.json"
}, collectionName: "Color")Present sync results:
📊 Sync Complete:
- Created: X variables, Y styles
- Updated: Z variables
- Skipped (in-sync): N
- Failed: M (with error details)Optionally cache tokens for lint integration:
cache_tokens(filePath: "...") → cache for lint rules to referenceThis enables lint rules (e.g., spec-color, spec-typography) to check designs against the synced token spec.
{color.primary} → references the actual variable| Tool | Purpose |
|---|---|
list_tokens | Parse and preview DTCG tokens |
sync_tokens | Sync single-mode tokens to Figma |
sync_tokens_multi_mode | Sync multi-mode tokens (Light/Dark) |
diff_tokens | Compare DTCG vs Figma variables |
reverse_sync_tokens | Export Figma variables to DTCG JSON |
cache_tokens | Cache tokens for lint integration |
list_cached_tokens | List cached token entries |
delete_cached_tokens | Remove cached token entry |
scan_styles | Scan local styles (paint, text, effect) |
export_tokens | Export all local variables as DTCG tokens |
diff_styles | Compare DTCG tokens against Figma styles |
spec-compare → token-sync → design-lint
(audit gap) (this skill) (verify compliance)After syncing, run design-lint with token category to verify designs comply with the synced tokens.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.