npm JavaScript analyzed 0.13.2

figma-developer-mcp

v0.13.2

Give your coding agent access to your Figma data. Implement designs in any framework in one-shot.

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio verified reported listed in the official MCP registry counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals npm-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v0.13.2 · analyzer v33 · 4w ago

suspicious endpoint us.i.posthog.com (telemetry) expected for this server's purpose package/dist/chunk-BMERTI2I.js :1 LsUHU4TGGpgAiscm8nhjudHgAJzAdzXkJV",lt="https://us.i.posthog.com",M,te,oe,N=!0,re=!1,Ie=[],Fe=new nt;function ne(e,t){let o=e.filter(Boolean);return o.length===0?t():Fe.run(o,t)}function mt(e){return

code evidence v0.13.2 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 12

net package/dist/chunk-BMERTI2I.js :9 sponseBody:o=[],...r}=t;try{let n=await fetch(e,r);if(!n.ok){let l={};n.headers.forEach((c,g)=>{l[g]=c});let u=await Ot(n,o.filter(Boolean)),p=u?`
net package/dist/chunk-CPSYXR2U.js :1 {category:"invalid_input"});let o=await fetch(e,{method:"GET"});o.ok||l(new Error(`Failed to download image: ${o.statusText}`),{category:"image_download"});let i=c.createWriteStream(t),a=o.body?.getRe

show 19 more