figma-automation

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The GitHub URL points to a normal public repository (low/typical risk), but the rube.app/mcp endpoint is an unvetted third‑party MCP server the skill asks you to trust without credentials—this could proxy auth flows or exfiltrate data, so treat the combination as moderately risky.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow calls Rube MCP tools (e.g., FIGMA_DISCOVER_FIGMA_RESOURCES, FIGMA_GET_FILE_JSON, FIGMA_GET_FILE_NODES) that ingest Figma file content/comments from the operator-supplied Figma URLs, which is outsider-authored text that can be returned as readable prose in tool outputs and then placed into the agent’s LLM context.