figma-orient

SUSPICIOUS: mostly coherent Figma-orientation behavior, but the primary dependency is a third-party MCP/bridge instead of Figma’s official server, and the workflow transitively invokes another skill. No confirmed malware or direct credential theft appears in the shown skill text, but the trust boundary is broader than the description suggests and should be reviewed carefully before use.