figma-automation

Warn

Audited by Socket on Jul 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s functional scope matches Figma automation, but its trust story is inconsistent. It relies on a discontinued Rube MCP endpoint, uses legacy tool naming, and routes authenticated Figma data through a third-party intermediary rather than a current official Composio endpoint, making the setup stale and the data flow less trustworthy than claimed.

Confidence: 87%Severity: 61%
Audit Metadata
Analyzed At
Jul 24, 2026, 01:00 AM
Package URL
pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Ffigma-automation%2F@047e18e726290de1e04a3f8882e30c42011344cea80838eb2cdaf06d548a9308
Security Audit — socket — figma-automation