design-to-code

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md explicitly requires importing and analyzing third-party design files/links (e.g., "Figma design import" and "Import
• Load design file"), meaning the agent will fetch and interpret untrusted user-generated content from public design links which could embed instructions that influence code-generation decisions.