figma
Warn
Audited by Socket on Mar 23, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's capabilities largely match its stated Figma-bridge purpose, but its core dependency is a custom local broker/plugin path with no verifiable official provenance, versioning, or integrity checks. That makes the install and execution trust disproportionately weak even though the data flows are mostly consistent with a Figma integration.
Confidence: 82%Severity: 74%
Audit Metadata