figma-ui-design

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly shows Figma API calls (e.g., the "获取文件内容" fetch to https://api.figma.com/v1/files/FILE_KEY) and describes workflows that parse Figma file content to generate assets and code, meaning it ingests user-generated third‑party Figma files which the agent would read and act on.