figma-cracked-desktop
Fail
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONMETADATA_POISONING
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to clone a repository from an untrusted source:
https://github.com/GatorChopper/Figma-cracked.git. This repository is not affiliated with the official Figma organization. - [REMOTE_CODE_EXECUTION]: Instructions include running
npm installandnpm run buildon the downloaded code, followed by execution of the resulting binaries. This allows arbitrary code from the remote repository to execute on the local system. - [COMMAND_EXECUTION]: The skill uses multiple commands to build, package, and execute the application across different platforms (Linux, macOS, Windows).
- [PRIVILEGE_ESCALATION]: Installation on Linux involves using
sudo dpkg -iandsudo apt-get install -fto install packages built from an untrusted source, granting the software root-level access to the system. - [METADATA_POISONING]: The skill promotes 'cracked' software. Software labeled as 'cracked' or 'unofficial' from non-reputable sources is a common delivery mechanism for malware, such as info-stealers or backdoors.
Recommendations
- AI detected serious security threats
Audit Metadata