skills/planetabhi/figma-mcp-server/figma-agent/Socket

figma-agent

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s capabilities fit its stated Figma purpose, but it relies on a non-official third-party MCP server that receives the user’s FIGMA_API_KEY and mediates all API access. That makes the main concern supply-chain and credential-forwarding trust, not clear malicious behavior.

Confidence: 81%Severity: 58%

Audit Metadata

Analyzed At

Aug 24, 2026, 08:10 PM

Package URL

pkg:socket/skills-sh/planetabhi%2Ffigma-mcp-server%2Ffigma-agent%2F@d9bc430daa0d23ec1f20159a3f828a5c17f418d7e902c5392d1302a917c581a1