Skills/npm/figma-console-mcp

figma-console-mcp@1.40.9

BLOCKED

Publisher claims: "The most comprehensive MCP server for Figma — design tokens, variables, components, write tools, version history diff, accessibility audits, FigJam, Slides, and more. Local (WebSocket Desktop Bridge plugin) and Cloudflare Workers (paired + remote) modes." Observed in sandbox: static analysis only — behavior not yet observed.

Registry npm (MCP server)Publisher southleft · joined 0 days agoInstalls 92,648Last detonated 2 h ago
Dispute verdict

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

CRITICAL
Credential pass-through configurationREADME.md:486 · Credential pass-through configuration — agent relays sensitive credentials
AST02
CRITICAL
Access to sensitive file pathsdist/core/config.js:57 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/core/config.js:16 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/core/logger.js:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Destructive file system command detecteddist/core/figma-api.js:57 · Destructive file system command detected
AST05
CRITICAL
Access to sensitive file pathsdist/core/logger.js:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Destructive file system command detecteddist/core/figma-api.js:66 · Destructive file system command detected
AST05
CRITICAL
Access to sensitive file pathsdist/core/logger.js:31 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/core/figma-tools.js:1394 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/core/logger.js:30 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Credential pass-through configurationdist/core/tokens-tools.js:135 · Credential pass-through configuration — agent relays sensitive credentials
AST02
CRITICAL
Access to sensitive file pathsdist/core/config.js:49 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageREADME.md:44 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:200 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Process kill commanddist/core/identity.d.ts:40 · Process kill command — agent can terminate processes
AST05
HIGH
npx invocation of non-well-known packageREADME.md:92 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Process kill commanddist/core/port-discovery.d.ts:158 · Process kill command — agent can terminate processes
AST05
CRITICAL
Access to sensitive file pathsdist/local.js:2674 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/local.js:3136 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Process kill commandREADME.md:890 · Process kill command — agent can terminate processes
AST05
CRITICAL
Access to sensitive file pathsdist/local.js:3165 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Process kill commanddist/core/port-discovery.js:260 · Process kill command — agent can terminate processes
AST05
HIGH
npx invocation of non-well-known packageREADME.md:51 · npx invocation of non-well-known package — may execute untrusted code
AST06
CRITICAL
Access to sensitive file pathsdist/local.js:203 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Process kill commanddist/core/port-discovery.js:203 · Process kill command — agent can terminate processes
AST05
HIGH
Process kill commanddist/core/port-discovery.d.ts:178 · Process kill command — agent can terminate processes
AST05
HIGH
Process kill commanddist/core/port-discovery.js:122 · Process kill command — agent can terminate processes
AST05
HIGH
Process kill commanddist/core/port-discovery.js:123 · Process kill command — agent can terminate processes
AST05
CRITICAL
Access to sensitive file pathsdist/local.js:2660 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
URL with embedded credentialsdist/core/history/git-history.js:99 · URL with embedded credentials — may be phishing or credential leaking
AST07
HIGH
npx invocation of non-well-known packageREADME.md:68 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Process kill commanddist/core/identity.js:74 · Process kill command — agent can terminate processes
AST05
MEDIUM
File type combined with upload actiondist/core/tokens/schemas.js:69 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packagedist/local.js:3150 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
MCP server using network transport (SSE/HTTP)dist/core/multi-file-tools.d.ts:8 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
File type combined with upload actiondist/core/tokens-tools.js:54 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packagedist/local.d.ts:79 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedist/local.js:350 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedist/local.js:53 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedist/local.js:3410 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Process kill commanddist/core/port-discovery.js:419 · Process kill command — agent can terminate processes
AST05
HIGH
npx invocation of non-well-known packagedist/local.js:347 · npx invocation of non-well-known package — may execute untrusted code
AST06