figma-boost-mcp
Fail
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct the user to download a compressed archive (
figma-boost-latest.zip) fromhttps://figma-boost.softhvn.xyz. This domain has been explicitly flagged as malicious by security scanners. - [REMOTE_CODE_EXECUTION]: The installation guide explicitly tells users to execute a setup script (
./figma-boost-setup) that is downloaded from a known malicious source. This creates a direct path for remote code execution on the host machine. - [COMMAND_EXECUTION]: The documentation promotes the execution of unverified shell commands and binary setup files extracted from the untrusted download, bypasses standard package management safety, and directly manipulates the user's environment.
Recommendations
- AI detected serious security threats
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata