figma-cracked-desktop

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). While the figma.com links and example proxy are benign placeholders, the GitHub repo "GatorChopper/Figma-cracked" is an unofficial "cracked" desktop client from an unknown user (likely distributing or instructing building of executables), which is a high-risk distribution vector for malware.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill’s installation steps instruct cloning and building remote code (git clone https://github.com/GatorChopper/Figma-cracked.git followed by npm install and npm run build), which fetches and then executes repository code at runtime, so this external URL is a runtime dependency that can execute remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). This skill includes explicit privileged installation steps (sudo dpkg -i, sudo apt-get install -f), and instructions that modify system locations (installing to /Applications, package installation), so it pushes actions that change the host system state and may require elevated privileges.