figma-automation

SUSPICIOUS. The skill is broadly aligned with its stated Figma automation purpose and uses an official same-org Composio/Rube endpoint, so it does not look malicious. However, it routes Figma auth and content through a third-party managed MCP gateway rather than direct Figma APIs, and the setup claim about needing no keys/tokens is somewhat incomplete. Risk is medium due to intermediary data flow and external side effects, not because of overt malware behavior.