figma@r4

VERIFIED· install only

Publisher claims: "Bring Figma into a HyperFrames video - rendered assets, brand tokens, components, storyboard frames as reconstructed motion (frames read as states, not slides), shaders and connector-assisted motion. Use when the person pastes a figma.com link or asks to use a Figma design, frame, logo or brand." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher heygen-com · publishing for 578 daysInstalls 432KLast detonated 2d ago

$npx skills add figma

Watch Report an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.

Tested: every file read, file written and host contacted by what ran
Not tested: use of the skill by an agent

Is figma@r4 safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-12 and scored it 88/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

0.0sprocessno install scripts to re-run

Static findings

MEDIUM

npx invocation of non-well-known packageSKILL.md:8 · npx invocation of non-well-known package — may execute untrusted code

…les](../hyperframes/references/plugin-installation.md). **Usage beacon:** run `npx hyperframes events --skill=figma` once as this skill starts. It sends the skill's name with…

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packageSKILL.md:27 · npx invocation of non-well-known package — may execute untrusted code

…inute or import fewer nodes per call | ## Commands - A layer, logo or image: `npx hyperframes figma asset '<url or fileKey:nodeId>' [more refs] --format svg|png --scale 2 --…

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packageSKILL.md:29 · npx invocation of non-well-known package — may execute untrusted code

…leId:"figma:<name>", version}`). - A frame as editable HTML at exact geometry: `npx hyperframes figma component '<url or fileKey:nodeId>'`, packaged under `compositions/compon…

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packageSKILL.md:34 · npx invocation of non-well-known package — may execute untrusted code

… Motion (connector) Usage beacon: these phases have no CLI touchpoint, so run `npx hyperframes events --skill=figma-motion` when you begin and `npx hyperframes events --skill…

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

HIGH

Access to sensitive file pathsSKILL.md:16 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

… export from the person. ## Access `FIGMA_TOKEN` in the shell or the project `.env`. Check it exists before the first command; if not, tell the person how to make…

Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

npx invocation of non-well-known packageSKILL.md:28 · npx invocation of non-well-known package — may execute untrusted code

…--entity` lets `/media-use` find a brand mark later. - Brand colours and type: `npx hyperframes figma tokens <fileKey>`. Run it before `component` and paste the printed entrie…

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

Cost to the agent

Instructions loaded

≈1,576 tok

1 file · 3 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.