figma-cracked-desktop

Fail

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to clone a repository from an untrusted third-party source: https://github.com/GatorChopper/Figma-cracked.git. This repository is not affiliated with the official Figma organization or any recognized trusted vendor.
  • [REMOTE_CODE_EXECUTION]: The instructions require running npm install and npm run build immediately after cloning the repository. This execution flow allows the unverified code from the repository to run arbitrary scripts on the user's machine, which is a common vector for malware delivery.
  • [COMMAND_EXECUTION]: Several instructions involve high-privilege operations, such as sudo dpkg -i to install generated packages and sudo apt-get install -f. Granting administrative access to software derived from an unverified source poses a critical threat to system integrity.
  • [COMMAND_EXECUTION]: The skill suggests using chmod +x on downloaded AppImage files and modifying directory permissions with chmod -R 755 on configuration paths. These actions facilitate the execution of unverified binaries and could lead to unauthorized file access.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Jun 15, 2026, 12:03 PM
Security Audit — agent-trust-hub — figma-cracked-desktop