Does this skill work with free Figma accounts?

While basic file access works on all plans, advanced features like the Variables API and specific organizational management endpoints require a Figma Enterprise or Organization plan.

Is CSRF protection included in the OAuth implementation?

Yes, the provided OAuth callback handler demonstrates how to use and verify the state parameter to protect against Cross-Site Request Forgery attacks.

How does this skill handle OAuth token expiration?

It includes standardized logic for the token refresh flow, ensuring your application can exchange refresh tokens for new access tokens automatically.

Can I use this for bulk updating Figma variables?

Yes, the skill provides implementation patterns for the Variables API that support bulk create, update, and delete operations within Figma files.

Figma Enterprise RBAC & API

Name: Figma Enterprise RBAC & API
Author: jeremylongshore

byjeremylongshore

•

2,028

•

Design Tools

Implements robust Role-Based Access Control and OAuth 2.0 flows for Figma Enterprise and Organization environments.

This skill provides a comprehensive framework for developers building Enterprise-level Figma integrations. It simplifies the implementation of OAuth 2.0 authorization flows, token lifecycle management, and secure access to advanced Figma features like the Variables API and SCIM-based team management. By standardizing RBAC implementation and file-level permission checks, it ensures that your Figma-connected applications maintain strict security standards while streamlining administrative tasks across complex organizational structures.

Key Features

01Automated team, project, and file management via REST API

02Middleware patterns for file-level access control and RBAC validation

032,028 GitHub stars

04Complete OAuth 2.0 Authorization Code Flow implementation

05Secure token refresh and lifecycle management logic

06Enterprise-only Variables API integration for design systems

Use Cases

01Creating secure dashboards that require user-specific Figma permissions

02Building internal tools for managing large-scale design system variables

03Automating user onboarding and team provisioning for Figma Organization plans

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills figma-enterprise-rbac

For use in Claude.ai and ChatGPT

Key Features

01Automated team, project, and file management via REST API

02Middleware patterns for file-level access control and RBAC validation

032,028 GitHub stars

04Complete OAuth 2.0 Authorization Code Flow implementation

05Secure token refresh and lifecycle management logic

06Enterprise-only Variables API integration for design systems

Use Cases

01Creating secure dashboards that require user-specific Figma permissions

02Building internal tools for managing large-scale design system variables

03Automating user onboarding and team provisioning for Figma Organization plans

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills figma-enterprise-rbac

For use in Claude.ai and ChatGPT