figma-generate-design

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required "Parallel Workflow with generate_figma_design" mandates running a capture of a running web app (user-provided URL) and Step 2 instructs using search_design_system/get_libraries which can include community UI kits (public Figma libraries); those third‑party artifacts are read and then used to drive use_figma actions (importing components, transferring image hashes, and changing the canvas), so untrusted public content can materially influence agent behavior.