vibefigma

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and processes user-supplied Figma files (e.g., the Direct Command "npx vibefigma "https://www.figma.com/…\" --token") so it ingests arbitrary, user-generated content from a third-party site that the agent must read/interpret as part of its workflow.