github · Figma-Context-MCPfe3b504d75b6

Evidence

#!/usr/bin/env node

import { cli } from "cleye";

import { getServerConfig, UsageError } from "./config.js";

Remediation

Either remove the undeclared side effect or amend the tool description + input schema to disclose it. Add machine-readable `destructiveHint`, `networkHint`, `filesystemHint` annotations when the MCP spec supports them.

Evidence

#!/usr/bin/env node

import { cli } from "cleye";

import { getServerConfig, UsageError } from "./config.js";

Remediation

Either remove the undeclared side effect or amend the tool description + input schema to disclose it. Add machine-readable `destructiveHint`, `networkHint`, `filesystemHint` annotations when the MCP spec supports them.

Evidence

- name: Install dependencies

        run: pnpm install

        if: ${{ steps.release.outputs.release_created }}

      - name: Type check

        run: pnpm type-check

        if: ${{ steps.release.outputs.release_created }}

      - name: Build

        run: pnpm build

        if: ${{ steps.release.outputs.release_created }}

Remediation

Tool code must be static at registration time. Do not fetch and exec handler bodies from remote URLs. Do not mutate `server.tool` / `@mcp.tool` registrations post-startup. Pin a content hash and verify at load; reject drift. Version-bump and re-register through the normal publish flow, not in-process.

Evidence

);

      console.log("- Authentication Method: Personal Access Token (X-Figma-Token)");

    } else {

      console.log("- Authentication Method: Per-request X-Figma-Token header");

    }

    console.log(`- FRAMELINK_PORT: ${port.value} (source: ${configSources.port})`);

    console.log(`- FRAMELINK_HOST: ${host.value} (source: ${configSources.host})`);

Remediation

Strip C0/C1 control codes before printing user-controlled values. Python: re.sub(r"[\x00-\x08\x0b-\x1f\x7f]", "", s). Prefer a structured logger (json/logfmt) over raw print to stdout.

Evidence

componentPropertyCount: number;

  /** True if any node in the raw API response has non-empty `boundVariables`. */

  hasVariables: boolean;

  /** Wall-clock ms spent on the Figma API fetch (network + parse). */

  fetchMs: number;

  /** Wall-clock ms spent on the simplification walk. */

  simplifyMs: number;

Remediation

Pass timeout= on every call: - HTTP: `requests.get(url, timeout=5)`, `httpx.get(url, timeout=5.0)` - Node fetch: `AbortSignal.timeout(5000)` - Subprocess: `subprocess.run(["cmd"], timeout=30, check=True)` Pick a value short enough to fail fast and retry.

Evidence

): Promise<{ data: T; rawSize: number }> {

  const { redactFromResponseBody = [], ...fetchOptions } = options;

  try {

    const response = await fetch(url, fetchOptions);

    if (!response.ok) {

      const responseHeaders: Record<string, string> = {};

Remediation

Pass timeout= on every call: - HTTP: `requests.get(url, timeout=5)`, `httpx.get(url, timeout=5.0)` - Node fetch: `AbortSignal.timeout(5000)` - Subprocess: `subprocess.run(["cmd"], timeout=30, check=True)` Pick a value short enough to fail fast and retry.

Evidence

# Contributing to Framelink MCP for Figma

Thank you for your interest in contributing to the Framelink MCP for Figma! This guide will help you get started with contributing to this project.

## Philosophy

### Unix Philosophy for Tools

This project adheres to the Unix philosophy: tools should have one job and few arguments. We keep our tools as simple as possible to avoid confusing LLMs during calling. Configurable options that are more project-level (i.e., unlikely to change between requests 

Remediation

Declare a real authentication mechanism in the manifest, matching what the running server actually enforces: - `"auth": "bearer"` with a token scheme documented for callers - `"auth": "oauth"` / `"oauth2": { ... }` for delegated flows - `"apiKey": { "header": "X-API-Key", "prefix": "..." }` - `"mtls": true` when client certificates are required If the server is intentionally unauthenticated (stdio-only, local developer tool, trusted-host network), document the assumption in the manifest via a `"

Evidence

<a href="https://www.framelink.ai/?utm_source=github&utm_medium=referral&utm_campaign=readme" target="_blank" rel="noopener">

  <picture>

    <source media="(prefers-color-scheme: dark)" srcset="https://www.framelink.ai/github/HeaderDark.png" />

    <img alt="Framelink" src="https://www.framelink.ai/github/HeaderLight.png" />

  </picture>

</a>

<div align="center">

  <h1>Framelink MCP for Figma</h1>

  <h3>Give your coding agent access to your Figma data.<br/>Implement designs in any framework in

Remediation

Declare a real authentication mechanism in the manifest, matching what the running server actually enforces: - `"auth": "bearer"` with a token scheme documented for callers - `"auth": "oauth"` / `"oauth2": { ... }` for delegated flows - `"apiKey": { "header": "X-API-Key", "prefix": "..." }` - `"mtls": true` when client certificates are required If the server is intentionally unauthenticated (stdio-only, local developer tool, trusted-host network), document the assumption in the manifest via a `"

Evidence

import { type NextFunction, type Request, type Response } from "express";

import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";

import { createMcpExpressApp } from "@modelcontextprotocol/sdk/server/express.js";

import { Server } from "http";

import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";

import { ProxyAgent, EnvHttpProxyAgent, setGlobalDispatcher } from "undici";

import { Logger } from "./utils/logger.js";

import { hasProxyEnv, 

Remediation

Apply CSRF middleware at the route or router level: - Express: `app.use(csurf())` / `csrf-csrf` package - FastAPI: `fastapi-csrf-protect` with `Depends(...)` - Flask: `CSRFProtect(app)` from `flask_wtf.csrf` Or move to bearer-token auth and set `SameSite=Strict` / `SameSite=Lax` on any session cookies. Document the choice in the project README so reviewers can confirm intent.

Evidence

version: 10.10.0

        if: ${{ steps.release.outputs.release_created }}

      - uses: actions/setup-node@v4

        with:

          node-version: 24

          registry-url: "https://registry.npmjs.org"

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

env:

      FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true

    steps:

      - uses: googleapis/release-please-action@v4

        id: release

      - uses: actions/checkout@v4

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

- uses: actions/checkout@v4

        if: ${{ steps.release.outputs.release_created }}

      - uses: pnpm/action-setup@v4

        with:

          version: 10.10.0

        if: ${{ steps.release.outputs.release_created }}

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

name: Lint, Type Check, Test

    runs-on: ubuntu-latest

    steps:

      - uses: actions/checkout@v4

      - uses: ./.github/actions/setup

      - name: Scan for hidden characters

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

- uses: googleapis/release-please-action@v4

        id: release

      - uses: actions/checkout@v4

        if: ${{ steps.release.outputs.release_created }}

      - uses: pnpm/action-setup@v4

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc