by figma · MCP Server · ★ 858
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 858 |
| Forks | 116 |
| Category | MCP Server |
| License | MIT |
| Quality Score | 52/100 |
| Open Issues | 16 |
| Last Updated | 2026-07-17 |
| Created | 2019-08-27 |
| Platforms | mcp |
| Est. Tokens | ~12k |
Open Source Resources for the Figma Community A collection of open source plugins, widgets, agent skills, and developer resources for Figma products that have been shared on GitHub. There are two ways to submit: Pull Requests are welcome. Please see the Contributing Guide before opening a Pull Request.
These tools work well together with community-resources for enhanced workflows:
Looking for a community-resources alternative? If you're comparing community-resources with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Free, two-way Figma MCP server. Turn designs into framework-aware code, and push code back to the canvas. Work
AI can draw UI directly on the Figma canvas via JavaScript, and read existing designs back as structured data.
Your design system as an API. Connect AI to Figma for extraction, creation, and debugging.
180 free CSS3, Figma, Sketch & PSD gradients — plus a JSON dataset for design tools, generators, and AI agents
Official Sleek agent skill for creating and editing mobile app designs through the REST API. Includes account
Let Claude Code and other coding agents drive and debug Chrome from the shell. DOM, network, console and raw C
Explore other popular mcp server tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: