← 返回 Skills 市场
209
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install openclaw-figma
功能描述
Figma design asset reading, code generation, and MCP integration. Covers REST API direct calls and MCP Server capabilities for design-to-code workflows. **Us...
安全使用建议
Do not install blindly. Ask the publisher to clarify the apparent mismatches: (1) update the registry metadata to declare FIGMA_TOKEN as a required credential if the skill needs it; (2) confirm the exact data flow for MCP usage — which endpoints receive design data and whether those endpoints are under your control or third-party services; (3) verify that the listed file_keys in references/omada-assets.md are intended to be distributed with the skill (they may be proprietary); (4) audit the bundled scripts locally (figma_api.py is small and readable) and run them in an isolated environment before giving the token broad scopes or editor permissions; and (5) avoid granting editor or organization-level permissions until you confirm the MCP provider and OAuth flows, and consider using a least-privilege token (read-only) for initial testing.
功能分析
Type: OpenClaw Skill
Name: openclaw-figma
Version: 1.0.0
The skill bundle provides a legitimate integration for Figma design-to-code workflows, consisting of a Python CLI tool (scripts/figma_api.py) and detailed documentation for AI agents. The code uses standard libraries to interact with the official Figma REST API and requires a user-provided FIGMA_TOKEN. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the included file keys in references/omada-assets.md appear to be project-specific configuration rather than sensitive leaks.
能力评估
Purpose & Capability
The SKILL.md and supporting docs require a FIGMA_TOKEN and describe MCP (remote) interactions, but the registry metadata lists no required environment variables or primary credential — that's inconsistent. The included references/omada-assets.md also embeds many internal file keys (private project file identifiers) which goes beyond a minimal 'demo' skill and suggests access to proprietary assets.
Instruction Scope
Runtime instructions tell agents to use scripts that read arbitrary Figma file structure and to add/use an MCP server (https://mcp.figma.com/mcp) for interactive design-to-code and write-back. The human guide asserts the FIGMA_TOKEN "won't be exfiltrated," yet the MCP flow implicitly sends design data to a remote MCP endpoint and to Claude/Codex — the docs are inconsistent about where data goes and what is sent. The scripts themselves only call api.figma.com, but the SKILL.md explicitly instructs using remote MCP tooling that will transmit design content outside the local environment.
Install Mechanism
No install spec; this is instruction-only with a bundled utility script. The provided scripts/figma_api.py is plain, readable, and only performs authenticated calls to Figma and image downloads — no obfuscated code or remote arbitrary downloads.
Credentials
The skill effectively requires a FIGMA_TOKEN (documented in SKILL.md and used by the script) but the registry metadata declares no required env vars or primary credential — a mismatch. FIGMA_TOKEN is sensitive; the docs' claim that it "only exists locally, not exfiltrated" is not enforced by code and is contradicted by the MCP instructions which will send design data to remote endpoints. The asset list contains many internal file keys which may be sensitive information about your organization's design assets.
Persistence & Privilege
The skill does not request always:true and doesn't ask to modify other skills or system-wide configs. It reads/writes only within its own workspace (downloads to /tmp, references ~/.openclaw paths in docs) and uses normal API calls. No elevated persistence behavior observed.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install openclaw-figma - 安装完成后，直接呼叫该 Skill 的名称或使用
/openclaw-figma触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release: REST API CLI (7 commands), MCP Server 14 tools, Design-to-Code workflow, asset registry
元数据
常见问题
Figma Design Integration 是什么？
Figma design asset reading, code generation, and MCP integration. Covers REST API direct calls and MCP Server capabilities for design-to-code workflows. **Us... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 209 次。
如何安装 Figma Design Integration？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-figma」即可一键安装，无需额外配置。
Figma Design Integration 是免费的吗？
是的，Figma Design Integration 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Figma Design Integration 支持哪些平台？
Figma Design Integration 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Figma Design Integration？
由 陈源泉（@chenyqthu）开发并维护，当前版本 v1.0.0。
推荐 Skills