skills/hosseinmirzapur/opencode-skills/figma-generate-library/Socket

figma-generate-library

Warn

Audited by Socket on Aug 26, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the wrapper's stated purpose is plausible and Figma-related, but it mainly instructs installation of another skill bundle and points to a repo path inconsistent with Figma's documented canonical source. No direct malware or credential theft behavior is present, but the transitive trust and provenance ambiguity make it medium risk.

Confidence: 92%Severity: 58%

Audit Metadata

Analyzed At

Aug 26, 2026, 05:56 PM

Package URL

pkg:socket/skills-sh/hosseinmirzapur%2Fopencode-skills%2Ffigma-generate-library%2F@abecfdee2f540a8f6b853708eb7ddacbf2a0cb0be0af7445023ca683dfe23ccf