Beautiful Shadows
Low riskIndependent Review
Create smooth shadows in Figma by dragging a virtual light source over a selected element.
- Platform
- Figma
- Category
- Editing & effects
- Developer
- Alex Widua
- Pricing
- Free
- Official website
- www.figma.com
Review summary
Open source plugin. Manifest declares no network access, and a full read of the source code confirms it: the plugin only touches the current selection and stores its settings locally in the file. No network calls or third-party services found anywhere.
Privacy overview
What this plugin can access and where data may go. “Unknown” means we have not verified it — not that it is safe or unsafe.
- Data accessed
- Selected layer only (type, size, corner radius, existing shadow effects)
- Permissions requested
- Current page read/write
- Selection access
- External services
- None observed
- External APIs
- None found in source
- Database connections
- None — settings saved locally in the file via Figma's own plugin-data storage
- Authentication
- None
- Cloud storage
- None observed
- Analytics
- None found in source
- AI providers
- None observed
- Telemetry
- None found in source
- Cookies
- Not applicable — runs inside the Figma app, not a web page
Risk assessment
- Risk level
- Low risk
- Why this risk exists
- The plugin can read and modify effects on whatever layer is selected, and saves its settings locally inside the file. Network access is explicitly disabled in its manifest.
- Mitigation
- None needed — safe for use on any file, including confidential ones.
- Confidence
- Medium — full source code and manifest reviewed; live network traffic while running the plugin was not captured.
Review methodology
- Tests performed
- Manifest inspection
- Full source code review (all files)
- Dependency audit
- Evidence
- Plugin manifest (verified — declares no network access)
- Full source code on GitHub (verified — no network calls found)
- Dependency list (verified — no analytics or tracking libraries)
- Known limitations
- Live network traffic while the plugin runs was not captured
- No manual click-through testing performed
- Reviewer
- AI Agent supervised by a human
Read more about how we review and what Verified, Observed, Inferred and Unknown mean.
Review timeline
- Initial review published