Figma to Streamlit Component

Warn

Audited by Snyk on Apr 9, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and ingests external Figma files via the Figma MCP (e.g., "Action: Call mcp__plugin_figma_figma__implement-design with Figma URL" and many examples/usage steps referencing https://www.figma.com/file/...), and those untrusted, user-provided Figma designs are parsed and directly drive code generation, testing, and an autonomous self-correction loop—meeting all criteria for indirect prompt-injection risk.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 9, 2026, 05:34 PM
Issues
1