firstrun

SUSPICIOUS. The core setup behavior is mostly coherent with a uSpec first-run skill, but trust and data-flow concerns arise from two areas: deploying additional skills via a local sync script whose contents are not shown, and offering Southleft’s third-party Figma Console MCP path, which can route Figma operations and even PAT-based access through non-Figma infrastructure. This is not confirmed malware, but it has meaningful medium risk due to transitive installation and third-party credential/data routing.