figma-cracked-desktop
Fail
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to clone a repository from an untrusted third-party source:
https://github.com/GatorChopper/Figma-cracked.git. This repository is not affiliated with the official Figma organization or any recognized trusted vendor. - [REMOTE_CODE_EXECUTION]: The instructions require running
npm installandnpm run buildimmediately after cloning the repository. This execution flow allows the unverified code from the repository to run arbitrary scripts on the user's machine, which is a common vector for malware delivery. - [COMMAND_EXECUTION]: Several instructions involve high-privilege operations, such as
sudo dpkg -ito install generated packages andsudo apt-get install -f. Granting administrative access to software derived from an unverified source poses a critical threat to system integrity. - [COMMAND_EXECUTION]: The skill suggests using
chmod +xon downloaded AppImage files and modifying directory permissions withchmod -R 755on configuration paths. These actions facilitate the execution of unverified binaries and could lead to unauthorized file access.
Recommendations
- AI detected serious security threats
Audit Metadata