figma-console-mcp-skills

SUSPICIOUS: The functional scope and official Figma data flows are mostly coherent with the stated purpose, and there is no clear credential theft or exfiltration. The main concern is install-trust inconsistency: the referenced GitHub repo/org and `npm install && npm start` workflow do not align with the apparent upstream self-contained skill distribution, so the skill's actual install footprint is broader than necessary.