manage-variables-figma — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited manage-variables-figma (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Incremental, surgical edits to a Figma variable system: create one or many, update values in bulk, rename, set scopes and code syntax, add/rename modes, and delete. All via use_figma, on any plan.
await + return (no IIFE, no figma.closePlugin(); console.log is not returned), inputs inlined as const at the top of each script, colors in 0–1 range, load fonts before any text op, await figma.getNodeByIdAsync(...), and atomic errors (a failed script applies nothing — read the error, fix, retry).setup-design-tokens-figma. Code sync → import-tokens-figma /export-tokens-figma.
variableId/modeId/collectionId from theexport-tokens-figma read script or get_variable_defs. Collections can also be looked up by name inside the script.
complete, copy-paste use_figma snippet for each: create collection, create variable, batch create, batch update, rename, set scopes, add/rename mode, delete.
use_figma (skillNames: "manage-variables-figma"). For large value updates usescripts/batch-update-variables.js (10–50× faster than one-call-per-value).
get_variable_defs toverify. For deletes, confirm with the user first — removing a collection deletes all its variables and unbinds anything referencing them.
hexToRgb for hex input.ALL_SCOPES pollutes every picker.setVariableCodeSyntax('WEB', '--token-name')) so design↔code naming lines up.v.setValueForMode(modeId, figma.variables.createVariableAlias(targetVar)).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.