implement-design
Warn
Audited by Snyk on Mar 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill requires the agent to fetch and interpret user-provided Figma content (user-supplied Figma URLs and nodes) via MCP tool calls like get_design_context, get_screenshot, get_metadata and the MCP assets endpoint, which are untrusted, user-generated third-party sources that directly influence implementation decisions.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The skill requires user-provided Figma design URLs (e.g., https://figma.com/design/:fileKey/:fileName?node-id=1-2) which are fetched at runtime via get_design_context/get_screenshot and injected into the agent context to directly drive code-generation, so this is a runtime external dependency that can control the agent's behavior.
Audit Metadata