figma

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's capabilities largely match its stated Figma-bridge purpose, but its core dependency is a custom local broker/plugin path with no verifiable official provenance, versioning, or integrity checks. That makes the install and execution trust disproportionately weak even though the data flows are mostly consistent with a Figma integration.

Confidence: 82%Severity: 74%
Audit Metadata
Analyzed At
Mar 23, 2026, 08:43 AM
Package URL
pkg:socket/skills-sh/Angel1104%2Fui-ux-pro-max-skill%2Ffigma%2F@a28b1c863a2e27772e5d74178bb269e1cceb29a8
Security Audit — socket — figma