Figma to Streamlit Component
Warn
Audited by Snyk on Apr 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and ingests external Figma files via the Figma MCP (e.g., "Action: Call mcp__plugin_figma_figma__implement-design with Figma URL" and many examples/usage steps referencing https://www.figma.com/file/...), and those untrusted, user-provided Figma designs are parsed and directly drive code generation, testing, and an autonomous self-correction loop—meeting all criteria for indirect prompt-injection risk.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata