skills/reason-machines/design-skills/figma-kiwi-protocol-decode/Socket

figma-kiwi-protocol-decode

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

High-risk skill. Its capabilities go beyond legitimate design extraction into session theft, access-control bypass, and live mutation of Figma files via captured browser credentials. The install provenance is also not cleanly verifiable, increasing trust risk further.

Confidence: 90%Severity: 93%

Audit Metadata

Analyzed At

Jul 30, 2026, 03:05 AM

Package URL

pkg:socket/skills-sh/Aradotso%2Fdesign-skills%2Ffigma-kiwi-protocol-decode%2F@737a919d5694d5b9dadd9753446904796c841a20442acf2990f4031b49ea4f85