opencode-mcp-figma-auth
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill is primarily focused on managing authentication tokens and involves reading from and writing to sensitive credential files like
mcp-auth.jsonand system-specific paths like~/.local/share/opencode/mcp-auth.json. - [COMMAND_EXECUTION]: Code examples provided in the skill use
execSyncto perform file system operations, such as creating directories and moving authentication files to their required locations. - [EXTERNAL_DOWNLOADS]: The installation instructions involve
npm install, which downloads dependencies from the official npm registry to support the authentication logic.
Audit Metadata