Figma AI Design-to-Code (React + Tailwind Export) vs Lilith-Zero

“The primitive here is: AST-to-JSX transpilation with Tailwind class inference from Figma's internal constraint model. That's actually a non-trivial technical problem and Figma has the structural data advantage — named auto-layout frames, component instances, design tokens — that a scraper-based tool never would. But the DX bet is wrong: 'one-click export' buries the real question, which is whether the output composes cleanly into a real codebase or produces a flat wall of inline Tailwind classes that you immediately refactor. Every code-gen tool I've used produces components that are correct at pixel-level and wrong at architecture level — no prop interfaces, no variant logic, no state. If Figma ships actual component props derived from Figma variants and real token references instead of hardcoded hex strings, I'll revisit. Until I see a public code sample of a non-trivial component output, I'm calling this a well-resourced demo.”

“The Kani formal verification and cargo-fuzz integration tell me this isn't just a vanity security project—it's been engineered to actually be correct. Sub-millisecond overhead means there's no reason not to run this in front of every MCP agent deployment. 15 stars seems like an embarrassing undercount given what this does.”

“Category: design-to-code, competing directly with Anima, Locofy, Builder.io, and — honestly — just copy-pasting a Figma frame into v0. The specific scenario where this breaks is any design that wasn't built with dev handoff in mind: inconsistent component naming, mixed auto-layout and absolute positioning, custom illustrations as vector groups. That describes roughly 80% of real production Figma files. The 12-month killer here is v0 and Lovable — they generate React+Tailwind from a text prompt or screenshot and don't require a well-structured Figma source file at all. What would earn a ship: public examples of generated code from messy real-world files, plus evidence that the output passes a real TypeScript strict-mode check without modification.”

“The claims are impressive but 15 GitHub stars and one maintainer is not a security tool I'd deploy in production. Security tools require adversarial testing by the community over time—not just formal verification. The fail-closed design is correct philosophically, but I'd want to see 6 months of battle-testing and independent security audits before trusting it with real agent deployments.”

“The interaction model here is the right one: export lives inside the tool where the design already exists, not in a third-party plugin with its own auth flow and separate pricing. The real design question is whether the output respects the Figma component hierarchy — if a Button variant system in Figma becomes a proper React component with a variant prop rather than four separate exported components, that's a genuine system-level design decision that most competitors get wrong. The gap I'd watch: what happens to design tokens? If spacing and color values get baked as arbitrary Tailwind values like `p-[13px]` instead of referencing a token system, the design system thinking stops at the boundary of the export and you've just moved the inconsistency downstream.”

“The job-to-be-done is sharp and singular: eliminate the re-implementation step where a frontend engineer recreates what the designer already built. That's a real, expensive, recurring job that every product team has. The completeness question is where it gets complicated — a user can export a component, but can they actually retire Storybook, their existing component library, and their manual handoff Slack thread? Probably not yet, which means this is a complement to existing workflow, not a replacement, which makes it a weak ship. The specific product decision that earns the ship anyway is distribution: this ships to every Figma Professional user by default with no install, no plugin, no new tab — that's a forced-adoption wedge that third-party competitors cannot match, and adoption by inertia is still adoption.”

“This is the tool that enterprise security teams will demand before they let any AI agent touch production systems. The taint tracking model is particularly elegant—once data is tagged as sensitive, it can't flow to untrusted destinations regardless of what the LLM decides to do. This is the kind of principled security primitive the agentic ecosystem desperately needs.”

“Way too deep in the Rust/MCP security weeds for me to evaluate or use. This is infrastructure for enterprise AI security teams—not something a content creator or indie builder will interact with directly. Worth knowing it exists; not something I'll try this week.”