figma

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill fetches and parses arbitrary Figma file and node content (e.g., GET https://api.figma.com/v1/files/:file_key, /nodes, /components, image URLs) and handles webhook events like FILE_COMMENT, so it ingests user-generated/untrusted Figma content and interprets it to generate code and tokens.