figma-automation

SUSPICIOUS. The skill’s capabilities mostly match its stated Figma automation purpose, and it includes sensible boundaries for comments/exports. The main issue is install/execution trust and data-flow integrity: it directs users to a legacy Rube MCP endpoint that does not match current official Composio documentation, while routing Figma data through a third-party MCP layer. No evidence of malware, credential theft, or hidden execution appears in the skill itself, but the stale endpoint guidance and intermediary service dependency make it medium risk.