opencode-mcp-figma-auth
Fail
Audited by Snyk on Jun 15, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 0.90). This tool is explicitly designed to bypass Figma MCP agent whitelisting by generating and installing authentication tokens into users' OpenCode auth stores — enabling unauthorized agent access to potentially private design data and facilitating misuse.
Issues (1)
E006
CRITICALMalicious code pattern detected in skill scripts.
Audit Metadata