Skill Permissions

All skills & plugins / Codex official plugins

Figma

Figma workflows for design implementation, Code Connect templates, and design system rule generation.

Type
Plugin with 12 skills by Figma
Catalog
Codex official plugins
Source
openai/plugins/plugins/figma (112 files scanned)
Install and details
Agent Skills Index entry
License
see LICENSE file (LICENSE file)
Signals
HooksRemote MCP serverBundled scripts

Pre-approved tools

No allowed-tools or tools list in its SKILL.md, command or agent files, so the agent asks before using tools as usual.

Hooks

Hooks run automatically on these agent events, without you invoking the skill: PostToolUse.

EventMatcherRuns
PostToolUseWrite|Edit./scripts/post_write_figma_parity_check.sh

MCP servers and apps

ServerWhere it runsCredentials
figmaRemote: https://mcp.figma.com/mcpauth header or OAuth

Also ships 1 Codex app connector file (.app.json), which link a hosted app to your account.

Bundled code

10 code files (JavaScript, Shell, TypeScript):

Network calls

No HTTP or socket call pattern found in the code.

Starts other programs

No subprocess, exec or eval pattern found.

Credentials referenced

No key, token or secret environment variable found in code or MCP config.

Static scan of commit 0722921 on 2026-10-27. Signals are patterns found in the files, not a verdict: a network call can be the whole point of a skill. Read the linked lines before you decide. How the scan works.