figma-kiwi-protocol-decode

SUSPICIOUS: the skill’s core behavior goes beyond protocol decoding into explicit browser cookie theft and reuse for live Figma mutations. Its install provenance is not verifiable from the stated publisher, and the package/CLI would receive sensitive session credentials, making the overall footprint disproportionate and high risk.