github.com/grab/cursor-talk-to-figma-mcp · main · scanned 2 h ago · 3 config files
3 agent components (1 MCP server) in grab/cursor-talk-to-figma-mcp: 1 unvetted.
Components31 MCP server
High blast radius0credentials, shell or unvetted code
Credentials handed to agents0none seen
Not vetted1of 1 local servers, skills and plugins
| Component | Where | Verdict | Blast radius |
|---|---|---|---|
TalkToFigmaMCP server · Claude Code · stdionpm:cursor-talk-to-figma-mcp | .mcp.json | not vetted | medium
|
AGENTS.mdInstructions · any agent | AGENTS.md | clean | low
|
CLAUDE.mdInstructions · any agent | CLAUDE.md | clean | low
|
What to do about it
- Unvetted means we have no sandbox run for that exact package. Ask your agent to check before installing: claude mcp add killerskills -- npx -y vet-skills mcp
- For a whole organization (every repo and laptop, rescanned daily, with removal across machines), see Discovery for teams.