skills/podo/design-agent-skills/figma-official-skills/Socket

figma-official-skills

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is mainly a transitive installer, and its stated official install path is inconsistent with known Figma documentation. There is no direct exfiltration in this stub, but the trust chain and downstream-skill installation behavior make it higher risk than a normal documentation-only skill.

Confidence: 85%Severity: 68%

Audit Metadata

Analyzed At

Jun 25, 2026, 06:35 PM

Package URL

pkg:socket/skills-sh/podo%2Fdesign-agent-skills%2Ffigma-official-skills%2F@ab92b6fb4b4f811b19fcb829ce22064392e3cada74dcccd0f74af5443f0faa3e