Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add lukedj78/dev-flow --skill figma-to-design-mdgit clone --depth 1 https://github.com/lukedj78/dev-flowWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/lukedj78/dev-flow/figma-to-design-md)<a href="https://agentmods.dev/skills/lukedj78/dev-flow/figma-to-design-md"><img src="https://agentmods.dev/badge/skills/lukedj78/dev-flow/figma-to-design-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/lukedj78/dev-flow/figma-to-design-md"><img src="https://agentmods.dev/badge/skills/lukedj78/dev-flow/figma-to-design-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00096 | $0.03625 |
| Opus 5 | $0.00048 | $0.01813 |
| Sonnet 5 | $0.00019 | $0.00725 |
| Haiku 4.5 | $0.00010 | $0.00363 |
Grade C, and why
figma-to-design-md scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Harvests environment variableshighData exfiltration
Enumerating or grepping the environment for keys collects credentials unrelated to what the mod says it does.
**How to detect path B**: run `printenv FIGMA_ACCESS_TOKEN` (Bash). If empty, ask the user "Hai un Figma personal access token? (https://www.figma.com/developers/api#access-tokens)". If yes, accept it for the session — d How it starts
The opening of the file, as written. The whole thing — 200 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Figma → DESIGN.md
Generate a DESIGN.md file that conforms to the Google design.md spec (open format for portable design systems across AI agents — see references/spec.md). The source of truth is a Figma file the user points to via URL.
Dev-flow contract
This skill participates in the dev-flow workflow. When invoked on a project that has a .workflow/ folder at its root:
- Output goes into
<root>/.workflow/:DESIGN.md(the main artifact)screenshots/(any HD frame captures used during extraction — saved with slugged page names likehome-hero.png,type-system.png)
- State is updated by setting
meta.json#phase = "design_extracted"(only if the current phase is earlier in the enum), refreshingupdated_at, and appending an entry tometa.json#historywith skill name, inputs (figma URL, path used: MCP/REST/manual), and outputs. - Standalone mode (no
.workflow/present) is still supported — fall back to the original behavior of writingDESIGN.mdat the user-specified project root.
The canonical contract spec is in references/contracts.md. Read it if any rule above is unclear.
When this skill applies
Trigger on any of:
- A Figma URL pasted by the user (
figma.com/file/...,figma.com/design/...,figma.com/proto/...,figma.com/board/...). - An explicit request: "crea/genera il DESIGN.md", "estrai il design system", "build a DESIGN.md from this Figma", etc.
- Both combined.
If only a URL is pasted with no instructions, ask once whether the user wants a DESIGN.md generated. Don't assume.
What you produce
In dev-flow mode: <root>/.workflow/DESIGN.md + <root>/.workflow/screenshots/*.png (for any HD captures used).
In standalone mode: <project-root>/DESIGN.md.
The DESIGN.md content (same in both modes):
- YAML frontmatter — machine-readable design tokens (colors, typography, rounded, spacing, components).
- Markdown body — eight sections in this exact order, each as
##:- Overview (a.k.a. "Brand & Style")
- Colors
- Typography
- Layout (a.k.a. "Layout & Spacing")
- Elevation & Depth
- Shapes
- Components
- Do's and Don'ts
What ships with it
9 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 200 lines · 96 tokens per session scan C 0de4c2ffb066
figma-to-design-md is a skill published in the GitHub repository lukedj78/dev-flow (6 stars, last pushed today), licensed MIT. It adds 96 tokens to every session and 3,625 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it C with 1 finding (harvests environment variables). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
mcp-host-styling-integration
Integrates MCP App UI with host theming system. Applies host CSS variables, handles onhostcontextchanged, safe area insets, display mode detection, and fullscreen configuration.
moai-design-tools
Design tool integration specialist covering Figma MCP, Pencil renderer, and Pencil-to-code export. Use when fetching design context from Figma, rendering Pencil designs, or exporting to React/Tailwind code.
taiyi-ui-design
A design-planning guide for describing how an application's user interface should look and behave. It produces a UI-DESIGN.md document covering layouts, components, interactions, accessibility, and error states.
taiyi-diagram-render
A tool for rendering existing C4 or architecture Mermaid diagrams as SVG or PNG images. C4 is a way to show software systems at different levels, while Mermaid is a text format for diagrams.
taiyi-diagram-pipeline
A pipeline that creates and updates architecture diagrams in three stages: a C4 model from the code, an engineering architecture diagram, and an exported PNG image. C4 is a way to describe software architecture at several levels of detail.
moai-domain-design-dna
Reverse-engineer a reference design — a screenshot, an image set, or a live URL — into a portable Design DNA JSON across three dimensions (measurable tokens, qualitative style, special-rendering effects), then generate a new self-contained artifact from that JSON. Carries the extraction rules (dominance-based colour…