Figma Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Figma Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Figma 设计数据 → 结构化语义树 + 截图
代理 Figma Desktop MCP Server，将原始设计数据转换为结构化的语义分析 JSON，供 AI Agent 直接用于设计稿还原。
Figma Desktop App (port 3845)
↓ Streamable HTTP
figma-context-mcp-server (stdio)
↓ 增强输出
AI Agent (Gemini / Claude / etc.)| 工具 | 说明 |
|---|---|
figma_get_page_context | 主入口。截图 + 结构化分析 JSON（容器聚合、CSS、布局、重复检测） |
figma_analyze_structure | 仅结构化分析 JSON（不含截图）。已有截图时使用 |
| 工具 | 说明 |
|---|---|
figma_get_screenshot | 获取节点截图 |
figma_get_metadata | 获取节点层级树 (XML) |
figma_get_design_context | 获取原始参考代码 (React JSX + Tailwind) |
figma_get_variables | 获取设计变量 / Token |
| 工具 | 说明 |
|---|---|
figma_download_assets | 分析节点并下载所有图片/SVG 到本地 |
figma_fetch_all | 一次性导出全部数据 (metadata + context + screenshot + analysis) |
npm install
npm run build{
"mcpServers": {
"figma-context": {
"command": "node",
"args": ["path/to/dist/index.cjs"]
}
}
}src/
├── index.ts ← 入口 (McpServer + StdioServerTransport)
├── schemas.ts ← Zod schema 定义
├── figma-mcp.ts ← Figma Desktop MCP 通信层
├── analyzer.ts ← 语义分析核心 (从 semantic-analyze.mjs v3.1 移植)
└── tools.ts ← 8 个工具注册~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.