figma-boost-mcp

SUSPICIOUS/HIGH RISK. The stated Figma automation purpose is plausible, but the actual footprint relies on an unverified ZIP and executable from an unrelated .xyz domain, then forwards Figma credentials into that downloaded code. That supply-chain and credential-routing pattern is not consistent with a trustworthy Figma/MCP integration.