Agent skill · security · jeremylongshore
figma-policy-guardrails
Enforce security policies and coding standards for Figma API integrations.
Why this skill is useful
Adds specific linting rules and CI configurations for Figma API integrations that the AI wouldn't reliably generate on its own.
What it needs
Requires eslint, github-actions, pre-commit installed locally. About 4k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Figma Policy & Guardrails Overview Automated guardrails for Figma API integrations: prevent token leaks, enforce scope minimization, validate webhook configurations, and catch common anti-patterns in CI. Prerequisites ESLint or similar linter CI/CD pipeline (GitHub Actions) Pre-commit hooks infrastructure Instructions Step 1: Token Leak Prevention Step 2: ESLint Rules for Figma Step 3: API Usage Policies Step 4: Configuration Validation Step 5: Audit Logging Output Pre-commit hooks catching token leaks CI pipeline scanning for hardcoded credentials Runtime policies enforcing performance best practices Configuration validation at startup Audit logging for compliance Error Handling Issue Cause Solution ------- ------- ---------- False positive on token scan Test fixture contains figd Exclude test fixtures directory Policy blocks legitimate request Too restrictive Add exception list for specific paths Startup validation fails Missing env vars Check deployment config Audit log noise Too many entries Filter to write operations only Examples Catch a hardcoded Figma PAT before it reaches a commit (Step 1 pre-commit hook): Lint a violation of the API usage policy (Step 2 ESLint rule flags full-file fetches): Policy rule catalog and the audit-log event shape: references/api-usage-policies.md and references/audit-logging.md. Resources Figma API Scopes Pre-commit Framework ESLint Custom Rules Next Steps For architecture blueprints, see figma-architecture-variants.
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/figma-policy-guardrails