figma-generate-design

Warn

Audited by Socket on Oct 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the entry is mostly benign metadata, but it explicitly pushes users toward installing another skill bundle and the cited upstream path is provenance-unclear versus current official Figma documentation. No direct malware behavior, credential harvesting, or exfiltration is present in this entry itself.

Confidence: 90%Severity: 50%
Audit Metadata
Analyzed At
Oct 20, 2026, 10:42 PM
Package URL
pkg:socket/skills-sh/nexu-io%2Fopen-design%2Ffigma-generate-design%2F@863fe555e29f5c79bd92839057a212f4bfbdf188