opencode-mcp-figma-auth
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The documentation includes script snippets that use
child_process.execSyncto automate environment setup, specifically for creating directories and moving the generated authentication file to the appropriate application folder. - [CREDENTIALS_UNSAFE]: The skill is designed to manage authentication tokens for the Figma MCP service. It provides guidance on generating, merging, and storing these tokens in
~/.local/share/opencode/mcp-auth.jsonand includes security best practices such as recommending the use ofchmod 600to restrict file access.
Audit Metadata