converting-figma-designs
Warn
Audited by Snyk on Mar 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). This skill explicitly ingests user-generated Figma and FigJam content via MCP tools (e.g., get_design_context, get_metadata, get_screenshot in SKILL.md and references/mcp-tools.md), meaning untrusted third-party design data is read and used to generate code and drive decisions.
Audit Metadata