bridge-troubleshooting
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation directs users to download a companion plugin from the author's official GitHub repository (github.com/alvinindra/figma-mcp-rust). This resource belongs to the vendor's own infrastructure and is required for the tool's intended bridge functionality.
- [SAFE]: The skill uses a local websocket connection (127.0.0.1:1994) for communication between the MCP server and the Figma plugin. This loopback address is a whitelisted destination and does not represent a data exfiltration risk. No prompt injection, obfuscation, or persistence mechanisms were found.
Audit Metadata