figma-mcp-server

The server uses `process.env.FIGMA_TOKEN` or passes a token argument, which is good practice for secret handling. It explicitly states it uses stdio transport and does not expose an HTTP port, reducing direct network attack surface. There is no usage of `eval` or obvious obfuscation. The `generate_frontend` tool produces React/HTML code; while basic, it uses `escapeJsxText` for text content, mitigating simple XSS from Figma text. The primary security consideration is the sensitive nature of the Figma Personal Access Token and the potential for its misuse if the LLM client or the environment running the server is compromised.