figma-official-skills

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The listed install commands (e.g., "npx skills add figma/figma-use" which fetches the figma/* packages from the npm registry at runtime) will download and execute remote package code that the skill relies on, so there is a runtime external dependency that executes remote code.