figma-canon

SUSPICIOUS. The skill's stated purpose as a Figma safety canon is mostly coherent, but it goes beyond passive guidance by steering the agent toward operational write paths, third-party MCP infrastructure, and other skills. The main risk is credential/data flow integrity: official Figma MCP usage is aligned, but the endorsed figma-console path can forward Figma tokens and session data to non-Figma code/services, which is disproportionate for a read-only knowledge skill.