github · Figma-Context-MCPfe3b504d75b6

User-controlled value printed to terminal without ANSI escape sanitization. Malicious input can inject cursor-control sequences, rewrite earlier output, or hide shell commands from the operator.

);

      console.log("- Authentication Method: Personal Access Token (X-Figma-Token)");

    } else {

      console.log("- Authentication Method: Per-request X-Figma-Token header");

    }

    console.log(`- FRAMELINK_PORT: ${port.value} (source: ${configSources.port})`);

    console.log(`- FRAMELINK_HOST: ${host.value} (source: ${configSources.host})`);

Network / IO / subprocess call without an explicit timeout. A malicious or hung upstream (HTTP host, socket peer, child process) can pin threads, exhaust connection/process pools, and make the MCP server unresponsive. Always pass a bounded timeout. v2 extends v1 with subprocess coverage (R03 from the legacy readiness audit).

componentPropertyCount: number;

  /** True if any node in the raw API response has non-empty `boundVariables`. */

  hasVariables: boolean;

  /** Wall-clock ms spent on the Figma API fetch (network + parse). */

  fetchMs: number;

  /** Wall-clock ms spent on the simplification walk. */

  simplifyMs: number;

Network / IO / subprocess call without an explicit timeout. A malicious or hung upstream (HTTP host, socket peer, child process) can pin threads, exhaust connection/process pools, and make the MCP server unresponsive. Always pass a bounded timeout. v2 extends v1 with subprocess coverage (R03 from the legacy readiness audit).

): Promise<{ data: T; rawSize: number }> {

  const { redactFromResponseBody = [], ...fetchOptions } = options;

  try {

    const response = await fetch(url, fetchOptions);

    if (!response.ok) {

      const responseHeaders: Record<string, string> = {};

GitHub Actions `uses:` reference is not pinned to a 40-character commit SHA. Tags (`@v4`) and branches (`@main`) are mutable — a compromised maintainer or a tag rewrite can substitute malicious code into your CI pipeline silently. Pin to a SHA: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab`. For readability, include the version as a trailing comment: `# v4.1.1`. Tools like `pinact` / `ratchet` automate this. Allowed unpinned forms (excluded by the rule): - Local actions `.

version: 10.10.0

        if: ${{ steps.release.outputs.release_created }}

      - uses: actions/setup-node@v4

        with:

          node-version: 24

          registry-url: "https://registry.npmjs.org"

GitHub Actions `uses:` reference is not pinned to a 40-character commit SHA. Tags (`@v4`) and branches (`@main`) are mutable — a compromised maintainer or a tag rewrite can substitute malicious code into your CI pipeline silently. Pin to a SHA: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab`. For readability, include the version as a trailing comment: `# v4.1.1`. Tools like `pinact` / `ratchet` automate this. Allowed unpinned forms (excluded by the rule): - Local actions `.

env:

      FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true

    steps:

      - uses: googleapis/release-please-action@v4

        id: release

      - uses: actions/checkout@v4

GitHub Actions `uses:` reference is not pinned to a 40-character commit SHA. Tags (`@v4`) and branches (`@main`) are mutable — a compromised maintainer or a tag rewrite can substitute malicious code into your CI pipeline silently. Pin to a SHA: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab`. For readability, include the version as a trailing comment: `# v4.1.1`. Tools like `pinact` / `ratchet` automate this. Allowed unpinned forms (excluded by the rule): - Local actions `.

- uses: actions/checkout@v4

        if: ${{ steps.release.outputs.release_created }}

      - uses: pnpm/action-setup@v4

        with:

          version: 10.10.0

        if: ${{ steps.release.outputs.release_created }}

GitHub Actions `uses:` reference is not pinned to a 40-character commit SHA. Tags (`@v4`) and branches (`@main`) are mutable — a compromised maintainer or a tag rewrite can substitute malicious code into your CI pipeline silently. Pin to a SHA: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab`. For readability, include the version as a trailing comment: `# v4.1.1`. Tools like `pinact` / `ratchet` automate this. Allowed unpinned forms (excluded by the rule): - Local actions `.

name: Lint, Type Check, Test

    runs-on: ubuntu-latest

    steps:

      - uses: actions/checkout@v4

      - uses: ./.github/actions/setup

      - name: Scan for hidden characters

GitHub Actions `uses:` reference is not pinned to a 40-character commit SHA. Tags (`@v4`) and branches (`@main`) are mutable — a compromised maintainer or a tag rewrite can substitute malicious code into your CI pipeline silently. Pin to a SHA: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab`. For readability, include the version as a trailing comment: `# v4.1.1`. Tools like `pinact` / `ratchet` automate this. Allowed unpinned forms (excluded by the rule): - Local actions `.

- uses: googleapis/release-please-action@v4

        id: release

      - uses: actions/checkout@v4

        if: ${{ steps.release.outputs.release_created }}

      - uses: pnpm/action-setup@v4