figma-catalog-import

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). These URLs point to a personal GitHub project that explicitly instructs users to download a prebuilt plugin ZIP from the repository's "releases/latest" (a personal GitHub release can contain arbitrary binaries), so obtaining and running that archive without verifying the build/source is a security risk.