design-system-inventory-figma — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited design-system-inventory-figma (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A single use_figma call that walks the whole file and returns a structured kit: tokens (every local variable, grouped by collection and mode), components (standalone components + component sets, with property definitions and a compact visualSpec per variant), and styles (paint/text/effect styles with their resolved values). It is the "read everything once" front door for code generation and library audits.
await + return (no IIFE, no figma.closePlugin(); console.log is not returned), inputs inlined as const at the top of each script, colors in 0–1 range, load fonts before any text op, await figma.getNodeByIdAsync(...), and atomic errors (a failed script applies nothing — read the error, fix, retry).use deep-component-figma. One variant set as a CSS state machine → use analyze-component-set-figma. Token files on disk → use export-tokens-figma.
get_design_contextworks on a single selection and get_metadata returns flat structure, neither gives a unified tokens+components+styles kit on ANY plan.
INCLUDE — any of "tokens", "components", "styles" (default: all three).VERBOSITY — "full" (per-variant visual specs), "summary" (component metadata + props, noper-variant specs), or "inventory" (names/ids/counts only — for huge files).
COMPONENT_NAME_FILTER — substring to limit components (e.g. "Button").use_figma (skillNames: "design-system-inventory-figma"). Reads variables throughthe Plugin API, so it works on every Figma plan (no Enterprise REST requirement).
tokens for color/spacing/typography values, components[].properties forthe component API, components[].variants[].visualSpec for per-state appearance, and styles for any style-based (non-variable) values.
VERBOSITY or narrow INCLUDE /COMPONENT_NAME_FILTER and re-run — don't try to page a giant full dump.
{Color.Brand.Primary}-style) where possible.references/visual-spec.md for the fields (fills, strokes, effects, cornerRadius, opacity, layout/padding/spacing, typography).
figma_get_design_system_kittool, written in the native use_figma idiom so it runs without the Desktop Bridge. It captures each component/variant's root visual spec plus its direct children (childSpecs); it does not recurse deeper.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.