figma-automation

Warn

Audited by Socket on Jun 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The capability matches the stated Figma automation purpose, but the data path is mediated by a third-party/discontinued Rube MCP endpoint instead of direct official Figma integration. The scope is otherwise proportionate, yet the stale endpoint, intermediary auth/data flow, and transitive handoff to other skills raise medium risk.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 17, 2026, 11:33 AM
Package URL
pkg:socket/skills-sh/diegosouzapw%2Fawesome-omni-skills%2Ffigma-automation%2F@43f304b1df21a9c20816125a0181a31a28e3249f6dfce1c7d894c6bccd4dbf0c
Security Audit — socket — figma-automation