figma-to-jira
Warn
Audited by Snyk on Feb 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill requires and directly calls the figma MCP tools (get_metadata, get_design_context, get_screenshot) on a user-supplied Figma file URL, ingesting and interpreting arbitrary third-party / user-generated design content which can materially change ticket creation and workflow decisions.
Audit Metadata