skills/wohsj110/figma_cli/figma-cli/Socket

figma-cli

Warn

Audited by Socket on Aug 4, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The stated purpose is coherent and read-only, but the skill relies on installing a third-party GitHub CLI and then handing it a Figma access token. With no verified same-org official distribution evidence provided, this is a disproportionate install-trust and credential-forwarding risk rather than confirmed malware.

Confidence: 84%Severity: 82%

Audit Metadata

Analyzed At

Aug 4, 2026, 05:54 AM

Package URL

pkg:socket/skills-sh/wohsj110%2Ffigma_cli%2Ffigma-cli%2F@a925421da0ff1f45098d9057abea28ba7aedc50c19e1589f0d18747edda7a1aa