Is figma-prototype-5d7991 safe to install?

SaferSkills independently audited figma-prototype-5d7991 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/figma-prototype/SKILL.md · 1 file

skills/figma-prototype/SKILL.md2.5 KB · Markdown

name: figma-prototype

description: Use when wiring or auditing Figma prototypes, including clicks, navigation, overlays, transitions, flow starts, scroll-fixed chrome, reaction maps, or inferred flows from static frames. Companion domain skill for figma-mcp-express prototype work.

Figma Prototype Wiring

Companion domain layer for prototype judgment. It does not redefine MCP execution rules: use figma-mcp-express for tool discovery, batch syntax, origin/channel, and validation; use this skill for interaction intent, transition choice, overlay limits, flow audits, and scroll-fixed behavior.

First Checks

Figma Desktop open with the plugin running; load the figma-mcp-express skill first for tool/batch discipline.
Prototype reactions live on ANY node (buttons, instances), not just frames — and prototypes are per-page.
Overlay appearance (position/scrim/dismiss) is read-only via the API. You can open an overlay (navigation:"OVERLAY") but not place or style it — that is configured in the Figma UI on the destination frame.

Workflow

Scope — given nodeIds, wire those frames; otherwise use the current page.
Read current state — run get_prototype for starts, edges, overlays, and existing reactions.
Analyze frames — use get_design_context for structure and scan_text_nodes for CTA labels.
Infer only with evidence — require at least two corroborating signals before auto-wiring; flag single-signal guesses.
Wire — batch set_reactions ops plus set_prototype_start for the entry frame.
Choose transitions by similarity — near-identical screens use SMART_ANIMATE; distinct screens use directional PUSH; peers use DISSOLVE; overlays use MOVE_IN/MOVE_OUT.
Verify — re-run get_prototype; flag dead ends, missing back paths, mobile hover triggers, unwired CTAs, and heavy PUSH between same-named frames.

Reference Router

Need	Read
Actions, triggers, transitions, overlays, component variants, flow starts	`references/prototype-patterns.md`
Infer flow from static frames, audit existing prototypes, reaction maps, conservative fixes	`references/prototype-audit.md`
Scrollable frames, sticky headers, pinned tab bars, fixed children	`references/prototype-scroll.md`

Cannot Do

Set overlay position/scrim/dismiss (read-only API) — only open the overlay.
State interactions belong on the component variants (CHANGE_TO), not stamped per instance from outside.
Create files, FigJam, or Slides.

figma-prototype-5d7991— agent skill

Is figma-prototype-5d7991 safe to install?

Figma Prototype Wiring

First Checks

Workflow

Reference Router

Cannot Do

Audit the pieces. Scan the whole. Decide.