figma-automation
Warn
Audited by Socket on Jun 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The capability matches the stated Figma automation purpose, but the data path is mediated by a third-party/discontinued Rube MCP endpoint instead of direct official Figma integration. The scope is otherwise proportionate, yet the stale endpoint, intermediary auth/data flow, and transitive handoff to other skills raise medium risk.
Confidence: 100%Severity: 60%
Audit Metadata