figma-boost-mcp

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (medium risk: 0.30). The skill instructs downloading software from an unverified external domain (figma-boost.softhvn.xyz) rather than a credible official registry or repository.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs downloading and installing setup materials from an untrusted third-party domain (softhvn.xyz), introducing a high-risk unverifiable runtime dependency.