create-voice

SUSPICIOUS. The core behavior matches the stated purpose of rendering accessibility specs in Figma, and there is no malware-like exfiltration or hidden execution. Risk comes from autonomous write behavior and especially the optional third-party figma-console MCP path, which forwards Figma access to unrelated code via an unpinned npm execution path; if restricted to official figma-mcp, this would be closer to benign.