figma-design-tool-workflows

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The MCP configuration in references/figma-mcp-ai-flywheel.md invokes npx to run the external package "@anthropic/figma-mcp-server" at runtime, which fetches and executes remote code that exposes tools controlling the agent via MCP (@"@anthropic/figma-mcp-server").